feat: add target-indirect option (#660)

Author: toomuchdesign

README.md

@@ -31,6 +31,7 @@ Error: Resource not accessible by integration
 | `target`                   | No       | `any`               | A flag to only auto-merge updates based on Semantic Versioning.<br />Possible options are: `major, premajor, minor, preminor, patch, prepatch, prerelease, any`.<br /><br />The value of this flag allows for updates for all the matching versions **and lower** with the respect for priority. This means, for example, if the `target` is set to `major` and the update is made to `minor` version the auto-merge will be triggered.<br /><br />For more details on how semantic version difference is calculated please see [semver](https://www.npmjs.com/package/semver) package.<br /><br />If you set a value other than `any`, PRs that are not semantic version compliant are skipped. An example of a non-semantic version is a commit hash when using git submodules. |
 | `target-development`       | No       |                     | Same as `target` but specifies semver for `development` dependencies only. If present, then it overrides the value in `target` for `development` dependencies.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | `target-production`        | No       |                     | Same as `target` but specifies semver for `production` dependencies only. If present, then it overrides the value in `target` for `production` dependencies.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| `target-indirect`          | No       |                     | Same as `target` but specifies semver for indirect dependency updates only. If present, then it overrides the value in `target` for indirect dependency updates.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
 | `pr-number`                | No       |                     | A pull request number, only required if triggered from a workflow_dispatch event. Typically this would be triggered by a script running in a separate CI provider. See [Trigger action from workflow_dispatch event](#trigger-action-from-workflow_dispatch-event) example.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
 | `skip-commit-verification` | No       | `false`             | If `true`, then the action will not expect the commits to have a verification signature. It is required to set this to `true` in GitHub Enterprise Server.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | `skip-verification`        | No       | `false`             | If true, the action will not validate the user or the commit verification status                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |

action.yml

@@ -35,6 +35,9 @@ inputs:
   target-production:
     description: 'Auto-merge on updates based on Semantic Versioning for production dependencies'
     required: false
+  target-indirect:
+    description: 'Auto-merge on updates based on Semantic Versioning for indirect updates'
+    required: false
   pr-number:
     description: 'A pull request number, only required if triggered from a workflow_dispatch event'
     required: false