Automerge dependabot package updates

[james-s-w-clark]

There's a few Github Actions I can easily help with, if you're interested!

1. Regular dependabot NPM package updates
2. Automerge dependabot package updates
3. Run tests on PR

I find these very helpful. It wouldn't take me long to add any of them :)

[arabello]

Running tests on PRs would be certainly helpful! Feel free to try it out!

I would avoid dependabot ATM as I think it would require testing out manually that everything is fine for each package update. It would be overwhelming: I prefer to spend my already short spare time dedicated to espanso hub to improve and add new features. Anyway It could be a great adding in the near future.

[james-s-w-clark]

Run tests on PR PR

That makes sense RE dependabot :)

I will save some snippets here for a later date. Feel free to close the ticket if you don't want it to hang around 👍

.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "daily"

/.github/workflows/auto-merge.yml

name: auto-merge

on:
  pull_request:
    branches:
      - main

jobs:
  automerge:
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
      contents: write
    if: ${{ github.actor == 'dependabot[bot]' }}
    steps:
      - uses: fastify/github-action-merge-dependabot@v3.0.2
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}

[arabello]

Thanks :) I'll leave it open as a future improvement