Review

The review action provides you with an automated way to review pull requests. This can be particularly useful in situations where you want to automatically approve pull requests that meet certain criteria, or to request changes on a pull request when a particular check fails.

Mergify applies these rules when it posts a review:

• Mergify skips a review whose type and body already match one it posted on the pull request. It posts the review again if it has posted the opposite type since: an APPROVE after a REQUEST_CHANGES, or the reverse.

• That comparison only covers reviews posted under the same account, so changing bot_account makes Mergify post an otherwise identical review again under the new one.

• On a merged pull request, only COMMENT is posted. APPROVE and REQUEST_CHANGES are ignored, and the action still reports a success — a green check there is not proof that a review was posted.

• A REQUEST_CHANGES or COMMENT review with no message is posted with a default body. Set message to choose the wording yourself.

pull_request_rules:
  - name: automatic approval
    conditions:
      - check-success = myfirstCIname
      - check-success = mysecondCIname
    actions:
      review:
        type: APPROVE

In this example, Mergify will automatically approve any pull request once all checks have passed successfully.

You can use Mergify to review a pull request on your behalf. This can be handy if you require a minimum number of reviews to be present on a pull request (e.g., due to branch protection) but want to automate some merges.

Dependabot is the bot behind GitHub’s automatic security updates. It sends automatic updates for your project’s dependencies, making sure they are secure. You can automate the approval of pull requests created by dependabot with a rule such as:

pull_request_rules:
  - name: automatic approval for Dependabot pull requests
    conditions:
      - author = dependabot[bot]
    actions:
      review:
        type: APPROVE
        message: Automatically approving dependabot