mesh-2770: add slack alert for failed pr

Author: james-bradley-nhs

.github/workflows/dependabot-auto-merge.yaml

@@ -12,37 +12,27 @@ on:
 jobs:
   enable-automerge:
     # Only run on Dependabot PRs
-    # if: github.event.pull_request.user.login == 'dependabot[bot]'
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
     runs-on: ubuntu-latest
     permissions:
       contents: write
       pull-requests: write
 
     steps:
-      # - name: Fetch Dependabot metadata
-      #   id: metadata
-      #   uses: dependabot/fetch-metadata@d7267f607e9d3fb96fc2fbe83e0af444713e90b7
-      #   with:
-      #     github-token: ${{ secrets.GITHUB_TOKEN }}
-
-      # - name: Auto-approve Dependabot PR
-      #   if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
-      #   uses: hmarr/auto-approve-action@v4
-      #   with:
-      #     github-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Fetch Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@d7267f607e9d3fb96fc2fbe83e0af444713e90b7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
 
-      # - name: Enable auto-merge for Dependabot PRs
-      #   if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
-      #   run: gh pr merge --auto --squash "$PR_URL"
-      #   env:
-      #     PR_URL: ${{ github.event.pull_request.html_url }}
-      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      
-      - name: Slack Notification
-        uses: slackapi/slack-github-action@v2.1.1
+      - name: Auto-approve Dependabot PR
+        uses: hmarr/auto-approve-action@v4
         with:
-          webhook: ${{ secrets.DEPENDABOT_SLACK_WEBHOOK_URL }}
-          webhook-type: incoming-webhook
-          payload: |
-            text : Hello from github
-            
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Enable auto-merge for Dependabot PRs
+        if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pull-request.yml

@@ -312,3 +312,19 @@ jobs:
 
       - name: poetry test publish
         run: poetry publish -r testpypi
+
+  slack-notification:
+    runs-on: ubuntu-latest
+    needs:
+      - coverage
+      - lint
+      - publish
+    if: ${{ always() && github.repository == 'NHSDigital/mesh-sandbox' && github.actor == 'dependabot[bot]' && contains(needs.*.result, 'failure') }}
+    steps:
+      - name: Slack Notification
+        uses: slackapi/slack-github-action@v2.1.1
+        with:
+          webhook: ${{ secrets.DEPENDABOT_SLACK_WEBHOOK_URL }}
+          webhook-type: incoming-webhook
+          payload: |
+            text : "Dependabot PR checks failed for ${{ github.repository }}:${{ github.ref }} in PR #${{ github.event.number }}"