name: Fix dependabot imports

on:
  pull_request:
    types: [opened, synchronize]

permissions:
  pull-requests: write
  contents: write

jobs:
  run-custom-command:
    if: ${{ github.actor_id == '49699333' }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          ref: ${{ github.event.pull_request.head.ref }}
          repository: ${{ github.event.pull_request.head.repo.full_name }}
          submodules: true
      - uses: actions/setup-go@v4
        with:
          go-version: "1.22"
          check-latest: true
      - name: Bump Go mod
        run: ./bumperate.sh
      - uses: stefanzweifel/git-auto-commit-action@v4
        with:
          commit_message: Bump Go mod SRI
          commit_user_name: Mimi
          commit_user_email: mimi@xeserv.us
          commit_author: Mimi <mimi@xeserv.us>
      - name: Enable Pull Request Automerge
        run: gh pr merge --squash --auto ${{ github.event.number }}
        env:
          GH_TOKEN: ${{ github.token }}