feat: change dependabot PR target branch (#35)

Author: mchuangatmp

.github/dependabot.yml

@@ -6,6 +6,6 @@ updates:
       interval: daily
       time: "08:00"
       timezone: "America/New_York"
-    target-branch: "development"
+    target-branch: "chore/dependabot"
     labels: ['dependabot']
     open-pull-requests-limit: 10

.github/workflows/dependabot-branch-rebase.yml

@@ -0,0 +1,12 @@
+name: "Dependabot Branch Rebase"
+
+on:
+    push:
+      branches:
+        - development
+    workflow_dispatch:
+
+jobs:
+  rebase-branch:
+    name: "Rebase Development onto Dependabot Branch"
+    uses: mParticle/mparticle-workflows/.github/workflows/dependabot-rebase-development.yml@stable

.github/workflows/pull-request.yml

@@ -1,6 +1,6 @@
 name: "Pull Request Checks"
 
-on: [ pull_request ]
+on: [ pull_request_target ]
 
 jobs:
 
@@ -9,3 +9,31 @@ jobs:
     uses: mParticle/mparticle-workflows/.github/workflows/android-sample-app-pull-request.yml@stable
     with:
       app_relative_path: "core-sdk-samples/higgs-shop-sample-app"
+
+  automerge-dependabot:
+    name: "Automerge Dependabot PR"
+    needs: [ higgs-shop-sample-app ]
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    env:
+      GITHUB_TOKEN: ${{ secrets.MP_SEMANTIC_RELEASE_BOT }}
+      GIT_AUTHOR_NAME: mparticle-bot
+      GIT_AUTHOR_EMAIL: [email protected]
+      GIT_COMMITTER_NAME: mparticle-bot
+      GIT_COMMITTER_EMAIL: [email protected]
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Rebase Dependabot PR"
+        uses: actions/github-script@v3
+        with:
+          script: |
+            github.pulls.merge({
+                owner: context.repo.owner,
+                repo: context.payload.repository.name,
+                pull_number: context.payload.pull_request.number,
+                merge_method: 'rebase'
+            });
+  rebase-development:
+      name: "Rebase Development onto Dependabot Branch"
+      needs: [ automerge-dependabot ]
+      if: ${{ github.actor == 'dependabot[bot]' }}
+      uses: mParticle/mparticle-workflows/.github/workflows/dependabot-rebase-development.yml@stable

.github/workflows/release.yml

@@ -119,6 +119,7 @@ jobs:
         if: ${{ github.event.inputs.dryRun == 'false'}}
         run: |
           git push origin HEAD:main
+          git push -f origin HEAD:chore/dependabot
           git push origin HEAD:development
       - name: "Delete release branch"
         if: ${{ github.event.inputs.dryRun == 'false' }}