ci-approve.yml

# Reference:
#   - https://github.com/tibdex/github-app-token
#   - https://github.com/hmarr/auto-approve-action

name: ci-approve

on: pull_request_target

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  auto-approve:
    name: "auto-approve"

    runs-on: ubuntu-latest

    permissions:
      pull-requests: write

    if: github.actor == 'dependabot[bot]'
    steps:
      - name: "generate token"
        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a
        id: generate-token
        with:
          app_id: ${{ secrets.AUTH_APP_ID }}
          private_key: ${{ secrets.AUTH_APP_PRIVATE_KEY }}

      - uses: hmarr/auto-approve-action@f0939ea97e9205ef24d872e76833fa908a770363
        with:
          github-token: ${{ steps.generate-token.outputs.token }}
          review-message: |
            🤖 Bleep! Bloop!

            Dependabot[bot] pull-request auto-approved 👍