From f4d2704d2f756989bef67749df642749f98ce93b Mon Sep 17 00:00:00 2001
From: Botond Szirtes <botond.szirtes@est.tech>
Date: Thu, 20 Feb 2025 15:17:58 +0100
Subject: [PATCH] Enable dependabot for updating github actions

Signed-off-by: Botond Szirtes <botond.szirtes@est.tech>
---
 .github/dependabot.yml                    | 17 +++++++++++++++++
 .github/workflows/automerge.yaml          |  2 +-
 .github/workflows/update-deployments.yaml |  2 +-
 3 files changed, 19 insertions(+), 2 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..50b55a77
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,17 @@
+---
+# Set update schedule for GitHub Actions
+
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      # Check for updates to GitHub Actions every week
+      interval: "weekly"
+    groups:
+      gh-actions-minor:
+        applies-to: version-updates
+        update-types:
+          - "minor"
+          - "patch"
diff --git a/.github/workflows/automerge.yaml b/.github/workflows/automerge.yaml
index c40519d1..7314bdd0 100644
--- a/.github/workflows/automerge.yaml
+++ b/.github/workflows/automerge.yaml
@@ -14,7 +14,7 @@ jobs:
       - uses: hmarr/debug-action@v2
 
   check-mergeability:
-    if: ${{ github.event.workflow_run.conclusion == 'success' && github.actor == 'nsmbot' }}
+    if: ${{ github.event.workflow_run.conclusion == 'success' && (github.actor == 'nsmbot' || github.actor == 'dependabot[bot]') }}
     uses: networkservicemesh/.github/.github/workflows/check-mergeability.yaml@main
     secrets:
       token: ${{ secrets.NSM_BOT_GITHUB_TOKEN }}
diff --git a/.github/workflows/update-deployments.yaml b/.github/workflows/update-deployments.yaml
index 5925bed3..042f33e1 100644
--- a/.github/workflows/update-deployments.yaml
+++ b/.github/workflows/update-deployments.yaml
@@ -6,7 +6,7 @@ on:
       - main
 jobs:
   update-deployments-k8s:
-    if: ${{ github.repository != 'networkservicemesh/cmd-template' }}
+    if: ${{ github.repository != 'networkservicemesh/cmd-template' && github.event.commits[0].author.name != 'dependabot[bot]' }}
     uses: networkservicemesh/.github/.github/workflows/update-deployments.yaml@main
     secrets:
       token: ${{ secrets.NSM_BOT_GITHUB_TOKEN }}