Update a Dependabot alert

type Github = {

  token: string;

};

/**

 * Update a Dependabot alert

 * You must use an access token with the `security_events` scope to use this endpoint with private repositories.

You can also use tokens with the `public_repo` scope for public repositories only.

GitHub Apps must have **Dependabot alerts** write permission to use this endpoint.

 */

export async function main(

  auth: Github,

  owner: string,

  repo: string,

  alert_number: string,

  body: {

    dismissed_comment?: string;

    dismissed_reason?:

      | "fix_started"

      | "inaccurate"

      | "no_bandwidth"

      | "not_used"

      | "tolerable_risk";

    state: "dismissed" | "open";

  }

) {

  const url = new URL(

    `https://api.github.com/repos/${owner}/${repo}/dependabot/alerts/${alert_number}`

  );

  const response = await fetch(url, {

    method: "PATCH",

    headers: {

      "Content-Type": "application/json",

      Authorization: "Bearer " + auth.token,

    },

    body: JSON.stringify(body),

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}