chore: auto-merge dependabot PRs (#174)

* chore: auto-merge dependabot PRs

See stackrox/actions#87

* Use merged commit

Until there's a new stackrox/actions v1 release.

* Add a TODO

* Update auto-merge.yml

New v1 was released

Author: porridge

.github/workflows/auto-merge.yml

@@ -0,0 +1,29 @@
+name: auto-merge
+
+on:
+  schedule:
+    - cron: '13 */6 * * *'  # Every 6 hours
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+concurrency:
+  group: auto-merge
+  cancel-in-progress: false
+
+jobs:
+  auto-merge:
+    name: Enable auto-merge for eligible PRs
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'stackrox'
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run auto-merge action
+        uses: stackrox/actions/automerge@v1
+        with:
+          github-token: ${{ secrets.RHACS_BOT_GITHUB_TOKEN }}