diff --git a/.github/workflows/create-dependabot-issues.yml b/.github/workflows/create-dependabot-issues.yml new file mode 100644 index 00000000..f0b439ab --- /dev/null +++ b/.github/workflows/create-dependabot-issues.yml @@ -0,0 +1,31 @@ +name: Create Dependabot Issues # from pull requests + +on: + pull_request: + types: [opened, synchronize] + branches: [develop] + +jobs: + create-issue: + runs-on: ubuntu-latest + permissions: + issues: write + if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }} + steps: + - name: Create issue + uses: actions-cool/issues-helper@v3 + with: + actions: 'create-issue' + token: ${{ secrets.GITHUB_TOKEN }} + title: ${{ github.event.pull_request.title }} + body: | + ### Dependabot opened a pull request to update a dependency. Please review it: ${{ github.event.pull_request.html_url }} + - [ ] Comment on this issue tagging Chayn staff (@kyleecodes) to be assigned as a reviewer on the PR. + - [ ] Review the pull request. See GitHub Docs below for guidance. Check the files changed, dependency review, and workflow test runs. + - [ ] Verify tests and happy paths are functional by cloning the dependabot branch and running locally. + - [ ] If pull request does not pass tests, suggest changes or write comments in the review. + - [ ] When tests pass, approve changes to complete the review, then notify us in issue discussions so we can get this merged. + + ### Resources + GitHub Docs - Reviewing Pull Requests with Dependency Updates: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-dependency-changes-in-a-pull-request + labels: 'dependencies'