feat(server): add profile and KYC management APIs #77
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependabot Auto-merge | |
| # --------------------------------------------------------------------------- | |
| # Trigger | |
| # --------------------------------------------------------------------------- | |
| # Runs on every PR opened or re-synced by Dependabot. | |
| # Only patch-version bumps that pass all CI checks are merged automatically. | |
| # Minor and major bumps always require manual review. | |
| # --------------------------------------------------------------------------- | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| # Least-privilege permissions — only what auto-merge needs. | |
| permissions: | |
| contents: write # needed to approve and merge the PR | |
| pull-requests: write # needed to add the "auto-merge" label and approve | |
| jobs: | |
| auto-merge: | |
| name: Auto-merge Dependabot patch updates | |
| runs-on: ubuntu-latest | |
| # Only act on Dependabot PRs — ignore all other authors. | |
| if: github.actor == 'dependabot[bot]' | |
| steps: | |
| # ----------------------------------------------------------------- | |
| # 1. Fetch Dependabot metadata so we can inspect the update type | |
| # ----------------------------------------------------------------- | |
| - name: Fetch Dependabot metadata | |
| id: meta | |
| uses: dependabot/fetch-metadata@v2 | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| # ----------------------------------------------------------------- | |
| # 2. Debug — log what Dependabot is trying to update | |
| # ----------------------------------------------------------------- | |
| - name: Log update details | |
| run: | | |
| echo "Package name: ${{ steps.meta.outputs.dependency-names }}" | |
| echo "Update type: ${{ steps.meta.outputs.update-type }}" | |
| echo "Package manager: ${{ steps.meta.outputs.package-ecosystem }}" | |
| # ----------------------------------------------------------------- | |
| # 3. Auto-approve patch-version updates | |
| # - version-update:semver-patch → approve + enable auto-merge | |
| # - anything else → skip (requires human review) | |
| # ----------------------------------------------------------------- | |
| - name: Approve patch update | |
| if: steps.meta.outputs.update-type == 'version-update:semver-patch' | |
| run: gh pr review --approve "$PR_URL" | |
| env: | |
| PR_URL: ${{ github.event.pull_request.html_url }} | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Enable auto-merge for patch update | |
| if: steps.meta.outputs.update-type == 'version-update:semver-patch' | |
| run: gh pr merge --auto --squash "$PR_URL" | |
| env: | |
| PR_URL: ${{ github.event.pull_request.html_url }} | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # ----------------------------------------------------------------- | |
| # 4. Label minor/major updates so maintainers know they need review | |
| # ----------------------------------------------------------------- | |
| - name: Label minor update for review | |
| if: steps.meta.outputs.update-type == 'version-update:semver-minor' | |
| run: gh pr edit "$PR_URL" --add-label "dependencies,needs-review" | |
| env: | |
| PR_URL: ${{ github.event.pull_request.html_url }} | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Label major update for review | |
| if: steps.meta.outputs.update-type == 'version-update:semver-major' | |
| run: gh pr edit "$PR_URL" --add-label "dependencies,breaking-change,needs-review" | |
| env: | |
| PR_URL: ${{ github.event.pull_request.html_url }} | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} |