11name :dependabot
2+ # Dependabot is annoying, but this makes it a bit less so.
23
34on :
45pull_request :
5- types :
6- -opened
7- push :
8- branches :
9- -main
6+ types :[opened, closed]
107
118permissions :
129contents :read
@@ -15,10 +12,14 @@ permissions:
1512concurrency :pr-${{ github.ref }}
1613
1714jobs :
18- # Dependabot is annoying, but this makes it a bit less so.
1915dependabot-automerge :
2016runs-on :ubuntu-latest
21- if :github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dependabot[bot]' && github.actor_id == 49699333 && github.repository == 'coder/coder'
17+ if :>
18+ github.event_name == 'pull_request' &&
19+ github.event.action == 'opened' &&
20+ github.event.pull_request.user.login == 'dependabot[bot]' &&
21+ github.actor_id == 49699333 &&
22+ github.repository == 'coder/coder'
2223permissions :
2324pull-requests :write
2425contents :write
4849dependabot-automerge-notify :
4950# Send a slack notification when a dependabot PR is merged.
5051runs-on :ubuntu-latest
51- if :github.event_name == 'push' && github.actor == 'github-actions[bot]' && github.actor_id == 41898282 && github.repository == 'coder/coder'
52+ if :>
53+ github.event_name == 'pull_request' &&
54+ github.event.action == 'closed' &&
55+ github.event.pull_request.merged == true &&
56+ github.event.pull_request.user.login == 'dependabot[bot]' &&
57+ github.repository == 'coder/coder'
5258steps :
5359 -name :Send Slack notification
5460env :