Support semver suffixes

.github/workflows/automerge.yml

@@ -3,6 +3,7 @@ name: "Dependabot auto-merge"
 on: pull_request
 
 permissions:
+  actions: write
   contents: write
   pull-requests: write
 
@@ -21,11 +22,14 @@ jobs:
           # Checking the PR title is a poor substitute for the actual PR changes
           # but as long as this is used only with dependabot PRs,
           # it should be safe to assume that the title is not misleading.
-          regexp='^Bump .* from [0-9]+\.[0-9]+\.[0-9]+(\.[0-9]+)? to [0-9]+\.[0-9]+\.[0-9]+(\.[0-9]+)?( in .*)?$'
-          if [[ "${PR_TITLE}" =~ $regexp ]]; then
-            gh pr review --approve "${PR_URL}"
+          regexp='^Bump .* from [0-9]+\.[0-9]+(\.[0-9]+)?(\.[0-9]+)?(\-[a-z]+)? to [0-9]+\.[0-9]+(\.[0-9]+)?(\.[0-9]+)?(\-[a-z]+)?( in .*)?$'
+          if ! [[ "${PR_TITLE}" =~ ${regexp} ]] ; then
+            echo 'Non-semver upgrade, needs manual review.'
+          elif [ "${BASH_REMATCH[3]}" != "${BASH_REMATCH[6]}" ] ; then
+            echo 'Version suffixes do not match, needs manual review.'
           else
-            echo 'Non-semver upgrade needs manual review'
+            echo 'Automated review approval.'
+            gh pr review --approve "${PR_URL}"
           fi
           gh pr merge --auto --squash "${PR_URL}"
         env: