gnosis / dex-services / 4136

31%

push

travis-pro

[Mergify] auto merge dependabot PRs (#1115)

This PR creates a rule to automatically merge passing dependabot updates (instead of having to do so manually every morning). 

Looking forward to hearing security concerns if there are any. The regex exact matches for dependabot and depenabot-preview bots (but usernames already taken by the real bot). Therefore I think in order to automerge using this rule, it would require to capture the original dependabot account in which case it would be simpler to hide malicious code in a benign looking update.

The rule has been taken from the [mergify docs](https://doc.mergify.io/examples.html#dependabot) and adjusted to the squash based merge we normally do in this repo.

### Test Plan

See dependabot PRs being auto-merged in the future.

10190 of 41695 branches covered (24.44%)

Branch coverage included in aggregate %.

2673 of 4379 relevant lines covered (61.04%)

13867.98 hits per line