Skip to content

ci(deps): auto-merge non-major dependabot updates - #18

Merged
DanielArndt merged 1 commit into
mainfrom
auto_merge_dependabot
Oct 19, 2026
Merged

DanielArndt merged 1 commit into
mainfrom
auto_merge_dependabot

Conversation

@DanielArndt

Copy link
Copy Markdown
Owner

Adds a workflow that enables squash auto-merge on Dependabot PRs.

  • Triggers on pull_request_target, only for PRs authored by dependabot[bot]
  • Uses dependabot/fetch-metadata (pinned to commit SHA) to skip semver-major updates, which still need manual review
  • Merge completes only after required status checks pass
  • Passes actionlint

Note: grouped PRs report the highest update type, so a group containing a major bump won't be auto-merged.

Enable squash auto-merge on dependabot PRs via gh once required checks pass. Semver-major updates are left for manual review.
@DanielArndt
DanielArndt enabled auto-merge (squash) October 19, 2026 14:55
@DanielArndt
DanielArndt merged commit a90b685 into main Oct 19, 2026
7 checks passed
@DanielArndt
DanielArndt deleted the auto_merge_dependabot branch October 19, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant