From 0cb16bfc5b439d3aca46de74da6abe42ab4aea0b Mon Sep 17 00:00:00 2001 From: karinasigartau0798 <79576240+karinasigartau0798@users.noreply.github.com> Date: Mon, 26 Apr 2021 15:52:31 +0300 Subject: [PATCH 1/6] Create dependabot.yml --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..d9ff0596a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: "npm" + directory: "/" + # Check interface updates everyday at 9am UTC + schedule: + interval: "daily" + time: "09:00" + allow: + - dependency-name: "@webex/component-adapter-interfaces" From 8f198f53bfa3e7c6e7b3b60e211359ea2c55e47f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Apr 2021 12:55:11 +0000 Subject: [PATCH 2/6] build(deps): bump @webex/component-adapter-interfaces Bumps [@webex/component-adapter-interfaces](https://github.com/webex/component-adapter-interfaces) from 1.11.0 to 1.16.1. - [Release notes](https://github.com/webex/component-adapter-interfaces/releases) - [Changelog](https://github.com/webex/component-adapter-interfaces/blob/master/CHANGELOG.md) - [Commits](https://github.com/webex/component-adapter-interfaces/compare/v1.11.0...v1.16.1) Signed-off-by: dependabot[bot] --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5b8324c38..b1f3f926f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -11299,9 +11299,9 @@ } }, "@webex/component-adapter-interfaces": { - "version": "1.11.0", - "resolved": "https://registry.npmjs.org/@webex/component-adapter-interfaces/-/component-adapter-interfaces-1.11.0.tgz", - "integrity": "sha512-XSlgvKudRatq1gmgD0EZ5PjHp0SGbvrfqqfHUCIEufZMl4wEcvOHPmWzZe3H9CQSkaLKUa7Jf8ngOa8KMOYBWA==" + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/@webex/component-adapter-interfaces/-/component-adapter-interfaces-1.16.1.tgz", + "integrity": "sha512-w9QE19G1mjUY7gna++6PilhPjMtIj/b+QaTKAwibdWkCurQcDGd6/yYc70UzWawLFkjvsIDltf36YfvO+dWjGw==" }, "@webpack-contrib/schema-utils": { "version": "1.0.0-beta.0", diff --git a/package.json b/package.json index 49911021f..990a6f22a 100644 --- a/package.json +++ b/package.json @@ -40,7 +40,7 @@ }, "dependencies": { "@juggle/resize-observer": "^3.2.0", - "@webex/component-adapter-interfaces": "^1.11.0", + "@webex/component-adapter-interfaces": "^1.16.1", "classnames": "^2.2.6", "date-fns": "^2.15.0" }, From c8c32953a110fba3b7b6de696516c5c56f19eeff Mon Sep 17 00:00:00 2001 From: karinasigartau0798 <79576240+karinasigartau0798@users.noreply.github.com> Date: Mon, 26 Apr 2021 16:32:37 +0300 Subject: [PATCH 3/6] Create automerge.yml --- .github/workflows/automerge.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/automerge.yml diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml new file mode 100644 index 000000000..f60d7ab2f --- /dev/null +++ b/.github/workflows/automerge.yml @@ -0,0 +1,29 @@ +name: "Dependabot Automerge - Action" + +on: + pull_request: + branches: + - master + +jobs: + dependency-automerge: + runs-on: ubuntu-latest + + steps: + - name: automerge + if: github.event.pull_request.user.login == 'dependabot[bot]' + uses: actions/github-script@v4 + with: + script: | + github.pullRequests.createReview({ + owner: context.repo.owner, + repo: context.payload.repository.name, + pull_number: context.payload.pull_request.number, + event: 'APPROVE' + }) + github.pullRequests.merge({ + owner: context.repo.owner, + repo: context.payload.repository.name, + pull_number: context.payload.pull_request.number + }) + github-token: ${{secrets.PERSONAL_TOKEN}} From 4b713e0fe55cb5d1b52cb6df8923b1f4e62717a5 Mon Sep 17 00:00:00 2001 From: karinasigartau0798 <79576240+karinasigartau0798@users.noreply.github.com> Date: Tue, 27 Apr 2021 09:56:48 +0300 Subject: [PATCH 4/6] Update automerge.yml --- .github/workflows/automerge.yml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml index f60d7ab2f..8ab11aca5 100644 --- a/.github/workflows/automerge.yml +++ b/.github/workflows/automerge.yml @@ -15,12 +15,6 @@ jobs: uses: actions/github-script@v4 with: script: | - github.pullRequests.createReview({ - owner: context.repo.owner, - repo: context.payload.repository.name, - pull_number: context.payload.pull_request.number, - event: 'APPROVE' - }) github.pullRequests.merge({ owner: context.repo.owner, repo: context.payload.repository.name, From fe85715fa9aaedefce74fddb2ca50f9f91872df3 Mon Sep 17 00:00:00 2001 From: karinasigartau0798 <79576240+karinasigartau0798@users.noreply.github.com> Date: Tue, 27 Apr 2021 10:00:25 +0300 Subject: [PATCH 5/6] Update automerge.yml --- .github/workflows/automerge.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml index 8ab11aca5..78778f6d5 100644 --- a/.github/workflows/automerge.yml +++ b/.github/workflows/automerge.yml @@ -15,9 +15,9 @@ jobs: uses: actions/github-script@v4 with: script: | - github.pullRequests.merge({ + github.pulls.merge({ owner: context.repo.owner, repo: context.payload.repository.name, pull_number: context.payload.pull_request.number - }) + }) github-token: ${{secrets.PERSONAL_TOKEN}} From 504ef663a9895444c0427208c204b0c6670ec56a Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Wed, 23 Jun 2021 08:10:41 +0000 Subject: [PATCH 6/6] build(deps): [security] bump postcss from 7.0.32 to 7.0.36 Bumps [postcss](https://github.com/postcss/postcss) from 7.0.32 to 7.0.36. **This update includes a security fix.** - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/7.0.32...7.0.36) Signed-off-by: dependabot-preview[bot] --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index b1f3f926f..ffd9d0cb0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -28584,9 +28584,9 @@ "dev": true }, "postcss": { - "version": "7.0.32", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-7.0.32.tgz", - "integrity": "sha512-03eXong5NLnNCD05xscnGKGDZ98CyzoqPSMjOe6SuoQY7Z2hIj0Ld1g/O/UQRuOle2aRtiIRDg9tDcTGAkLfKw==", + "version": "7.0.36", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-7.0.36.tgz", + "integrity": "sha512-BebJSIUMwJHRH0HAQoxN4u1CN86glsrwsW0q7T+/m44eXOUAxSNdHRkNZPYz5vVUbg17hFgOQDE7fZk7li3pZw==", "dev": true, "requires": { "chalk": "^2.4.2",