Updating interval to monthly. Separating general PR logic from Dependabot logic and applying rules in settings.

Author: erinesullivan

.github/dependabot.yml

@@ -3,8 +3,9 @@ version: 2
 multi-ecosystem-groups:
   maintenance:
     schedule:
-      interval: "cron"
-      cronjob: "0 6 1-7 * 1" # Every first Monday of the month at 6:00am
+      interval: "monthly"
+      time: "06:00"
+      day: "monday"
       timezone: "America/Detroit"
     commit-message:
       prefix: "Monthly dependency updates: "

.github/workflows/dependabot.yml

@@ -0,0 +1,20 @@
+name: Dependabot pull requests
+
+on: pull_request
+
+jobs:
+  dependabot:
+    name: Auto-merge Dependabot PRs
+    runs-on: ubuntu-latest
+    if:  ${{github.event.pull_request.user.login == 'dependabot[bot]'}}
+    permissions:
+      pull-requests: write
+      contents: write
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      PR_URL: ${{ github.event.pull_request.html_url }}
+    steps:
+      - name: Approve the PR
+        run: gh pr review --approve "$PR_URL"
+      - name: Merge the PR
+        run: gh pr merge --squash --auto "$PR_URL"

.github/workflows/pull-request.yml

@@ -4,9 +4,6 @@ on:
   push:
   pull_request:
 
-permissions:
-  contents: read
-
 jobs:
   build-and-test:
     name: Build and test
@@ -27,25 +24,3 @@ jobs:
         run: npm run build
       - name: Run tests
         run: npm run test
-
-  dependabot:
-    name: Dependabot pull requests
-    needs: build-and-test
-    runs-on: ubuntu-latest
-    # Only continue if a pull request was created by dependabot
-    if: ${{github.event.pull_request.user.login == 'dependabot[bot]' && github.event_name == 'pull_request'}}
-    permissions:
-      pull-requests: write
-      contents: write
-    env:
-      PR_URL: ${{github.event.pull_request.html_url}}
-      GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-    steps:
-      - name: Fetch Dependabot Metadata
-        uses: dependabot/fetch-metadata@v2
-        with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
-      - name: Approve the PR
-        run: gh pr review --approve "$PR_URL"
-      - name: Merge the PR
-        run: gh pr merge --squash --auto "$PR_URL"