Auto merge PR, run pre-commit, filter codeql

.github/workflows/codeql-analysis.yaml

@@ -14,12 +14,21 @@ name: "CodeQL"
 on:
   push:
     branches: [ "master" ]
+    paths:
+      - "**.py"
+      - "**.js"
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ "master" ]
+    paths:
+      - "**.py"
+      - "**.js"
   schedule:
     - cron: '35 4 * * 3'
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/test.yaml

@@ -25,9 +25,34 @@ jobs:
         run: |
           pip install pip-tools
           pip-sync requirements.txt requirements-dev.txt
-      - uses: pre-commit/action@v3.0.0
+      - name: Setup pre-commit cache
+        uses: actions/cache@v3
+        with:
+          path: ~/.cache/pre-commit
+          key: pre-commit-3|${{ env.pythonLocation }}|${{ hashFiles('.pre-commit-config.yaml') }}
+      - name: Check pre-commit
+        run: pre-commit run --show-diff-on-failure --color=always --all-files
       - name: Test
         run: pytest --cov=. --cov-branch --cov-report term-missing:skip-covered
         working-directory: ./src/
-      - name: Check pre-commit
+  auto_merge:
-        run: pre-commit run --all-files
+    name: Auto merge
+    runs-on: ubuntu-latest
+    needs: tests
+    permissions:
+      pull-requests: write
+      contents: write
+    env:
+      GH_TOKEN: ${{ github.token }}
+    if: >-
+      github.event.pull_request
+      && github.event.pull_request.merged == false
+      && (
+        github.event.pull_request.user.login == 'crocmagnon-pr[bot]'
+        || github.event.pull_request.user.login == 'pre-commit-ci[bot]'
+      )
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Auto merge
+        run: gh pr merge ${{github.event.pull_request.number}} --delete-branch --rebase