update-dist.yaml

name: Dependabot PR
on:
  pull_request:
    types: [opened, reopened, synchronize]

jobs:
  print-info:
    name: Print PR info
    runs-on: ubuntu-22.04

    steps:
      - name: Print some event info
        run: |
          echo Ref: ${{ github.ref }}
          echo Head-Ref: ${{ github.head_ref }}
          echo Actor: ${{ github.actor }}
          echo Event: ${{ github.event.pull_request }}

  auto-approve-pr:
    name: Auto approve dependabot PR
    runs-on: ubuntu-22.04
    if: >
      startsWith(github.head_ref, 'dependabot/npm_and_pnpm') &&
      github.actor == 'dependabot[bot]'

    needs: [print-info]

    permissions:
      pull-requests: write

    steps:
      - name: Check out code
        uses: actions/checkout@v3.5.3
        with:
          ref: ${{ github.head_ref }}

      - name: Dependabot metadata
        id: dependabot-metadata
        uses: dependabot/fetch-metadata@v1.6.0
        with:
          github-token: "${{ secrets.GITHUB_TOKEN }}"

      - name: Approve a PR
        if: ${{ steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch' }}
        run: |
          gh pr checkout "$PR_URL"
          [ "$(gh pr status --json reviewDecision -q .currentBranch.reviewDecision)" != "APPROVED" ] \
            && gh pr review --approve "$PR_URL" -b "LGTM :rocket:"
        env:
          PR_URL: ${{ github.event.pull_request.html_url }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  update-dist:
    name: Update dist
    runs-on: ubuntu-22.04
    if: >
      startsWith(github.head_ref, 'dependabot/npm_and_pnpm') &&
      github.actor == 'dependabot[bot]'

    needs: [auto-approve-pr]

    permissions:
      contents: write

    steps:
      - name: Check out code
        uses: actions/checkout@v3.5.3
        with:
          ref: ${{ github.head_ref }}

      - name: Setup Node
        uses: actions/setup-node@v3.8.1
        with:
          node-version: '16'

      - name: Setup pnpm
        run: npm install --location=global pnpm

      - name: Install dependencies
        run: pnpm install

      - name: Update dist
        run: pnpm build

      - name: Commit new dist
        uses: stefanzweifel/git-auto-commit-action@v4.16.0
        with:
          file_pattern: dist
          commit_message: Build dist