automerge-release.yaml

name: Automatically merge release PR

on:
  pull_request:
    branches:
      - master
    types:
      - opened

jobs:
  merge-release-pr:
    if: ${{ github.event.pull_request.head.ref == 'changeset-release/master' }}
    name: Merge release PR
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
      actions: write
      issues: write
      pull-requests: write
    timeout-minutes: 1

    steps:
      - name: GSM Secrets
        id: secrets_manager
        uses: toptal/davinci-github-actions/gsm-secrets@v15.4.1
        with:
          workload_identity_provider: ${{ secrets.IDENTITY_POOL }}
          service_account: ${{ secrets.SA_IDENTITY_POOL }}
          secrets_name: |-
            TOPTAL_DEVBOT_TOKEN:toptal-ci/TOPTAL_DEVBOT_TOKEN

      - name: Parse secrets
        id: parse_secrets
        uses: toptal/davinci-github-actions/expose-json-outputs@v15.4.1
        with:
          json: ${{ steps.secrets_manager.outputs.secrets }}

      - name: Merge pull request
        uses: actions/github-script@v7
        with:
          github-token: ${{ steps.parse_secrets.outputs.TOPTAL_DEVBOT_TOKEN }}
          script: |
            const commentBody = "This release pull request will be merged automatically"

            await github.rest.issues.createComment({
              owner: repository.owner,
              issue_number: ${{ github.event.number }},
              repo: repository.repo,
              body: commentBody,
            })

            await github.rest.pulls.merge({
              merge_method: "squash",
              owner: repository.owner,
              pull_number: ${{ github.event.number }},
              repo: repository.repo,
            })