Bump picomatch #6

	name: Dependabot Auto-Merge

	on:
	pull_request_target:
	types: [ opened, reopened, synchronize ]
	branches:
	- main

	concurrency:
	group: dependabot-auto-merge
	cancel-in-progress: false

	jobs:
	lock-and-merge:
	name: Lock, Approve, and Auto-Merge
	runs-on: ubuntu-latest
	if: >
	github.event.pull_request.user.login == 'dependabot[bot]' &&
	github.triggering_actor == 'dependabot[bot]'
	permissions:
	contents: write
	pull-requests: write
	steps:
	- name: Checkout PR head
	uses: actions/checkout@v4
	with:
	ref: ${{ github.event.pull_request.head.ref }}
	token: ${{ secrets.CI_TOKEN_ABOT }}

	- name: Set up Node.js
	uses: actions/setup-node@v4
	with:
	node-version: "20"

	- name: Install Bun
	uses: oven-sh/setup-bun@v1
	with:
	bun-version: latest

	- name: Install and lock dependencies
	run: \|
	bun install
	npm install

	- name: Commit and push lockfile if changed
	run: \|
	git add package-lock.json bun.lock bun.lockb 2>/dev/null \|\| true
	if ! git diff --cached --quiet; then
	git config user.name "the-agent-abot"
	git config user.email "the-agent-abot@users.noreply.github.com"
	git commit -m "Auto-lock: Update dependencies"
	git push
	fi

	- name: Approve PR
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: gh pr review ${{ github.event.pull_request.number }} --approve

	- name: Enable auto-merge
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: gh pr merge ${{ github.event.pull_request.number }} --auto --merge

Navigation Menu