Use newer GitHub workflow for auto-merge

.github/auto-merge.yml

@@ -0,0 +1,11 @@
+- match:
+    dependency_type: all
+    update_type: security:minor # includes patch updates!
+
+- match:
+    dependency_type: development
+    update_type: semver:minor # includes patch updates!
+
+- match:
+    dependency_type: production
+    update_type: semver:patch

.github/workflows/dependabot.yml

@@ -7,19 +7,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Automerge dependabot dependencies
-        uses: actions/github-script@v3
+        uses: ahmadnassri/action-dependabot-auto-merge@v2
-        if: github.actor == 'dependabot[bot]'
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            github.pullRequests.createReview({
-              owner: context.payload.repository.owner.login,
-              repo: context.payload.repository.name,
-              pull_number: context.payload.pull_request.number,
-              event: 'APPROVE'
-            })
-            github.pullRequests.merge({
-              owner: context.payload.repository.owner.login,
-              repo: context.payload.repository.name,
-              pull_number: context.payload.pull_request.number
-            })