Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: gcp api url #38

Merged
merged 1 commit into from May 26, 2021
Merged

chore: gcp api url #38

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
4 changes: 2 additions & 2 deletions README.md
View file
Open in desktop
Expand Up @@ -4,7 +4,7 @@ This action automatically approves and merges dependabot PRs.

## Usage

- install the [GitHub App](https://github.com/apps/dependabot-merge-action) on the repositories or organization where you want to use this action. Using a GitHub App is necessary since [this change](https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/) GitHub introduced which limits the permissions of the provided GITHUB_TOKEN and the availability of secrets in Dependabot pull requests. The source [code of the GitHub App](https://github.com/fastify/dependabot-merge-action-app/) is open source and hosted on Heroku. You can also host your own version of the app and customize the `api-url` input to point to your hosted instance.
- install the [GitHub App](https://github.com/apps/dependabot-merge-action) on the repositories or organization where you want to use this action. Using a GitHub App is necessary since [this change](https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/) GitHub introduced which limits the permissions of the provided GITHUB_TOKEN and the availability of secrets in Dependabot pull requests. The source [code of the GitHub App](https://github.com/fastify/dependabot-merge-action-app/) is open source and hosted on Google Cloud Platform. You can also host your own version of the app and customize the `api-url` input to point to your hosted instance.
- configure this action in your workflows providing the inputs described below

## Inputs
Expand Down Expand Up @@ -53,7 +53,7 @@ jobs:
steps:
- uses: fastify/github-action-merge-dependabot@v2.0.0
with:
github-token: ${{secrets.GITHUB_TOKEN}}
github-token: ${{ secrets.GITHUB_TOKEN }}
```

### Excluding packages
Expand Down
2 changes: 1 addition & 1 deletion action.yml
View file
Open in desktop
Expand Up @@ -22,7 +22,7 @@ inputs:
api-url:
description: 'Url of the API where the application is running'
required: false
default: 'https://dependabot-merge-action-app.herokuapp.com/'
default: 'https://fastify-dependabot-merge-app-5uewp47fja-uc.a.run.app/'
runs:
using: 'node12'
main: 'dist/index.js'
Expand Down