Merge pull request #519 from glours/update_dependabot_pr

Update dependabot PR to update go.sum file

.github/workflows/ci.yml

@@ -18,6 +18,24 @@ jobs:
       - name: Checkout code into the Go module directory
         uses: actions/checkout@v2
 
+      # https://github.com/dependabot/dependabot-core/issues/1995
+      - name: Update dependabot PR
+        if: github.event.pusher.name == 'dependabot-preview'
+        run: |
+          git config --local user.email "compose-cli-ci@docker.com"
+          git config --local user.name "CI GitHub Action"
+          go mod tidy -v
+          git add .
+          git commit -sm'Update go.sum after dependabot PR'
+
+      - name: Update dependabot PR if needed
+        if: github.event.pusher.name == 'dependabot-preview'
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: ${{ github.ref }}
+          force: false
+
       - name: Validate go-mod is up-to-date and license headers
         run: make validate