Skip to content

Auto-merge Dependabot's patch updates once check passes - #30

Merged
rdlu merged 1 commit into
mainfrom
chore/dependabot-automerge
Oct 24, 2026
Merged

rdlu merged 1 commit into
mainfrom
chore/dependabot-automerge

Conversation

@rdlu

@rdlu rdlu commented Oct 24, 2026

Copy link
Copy Markdown
Owner

Adds .github/workflows/dependabot-automerge.yml: on Dependabot's pull requests (plain pull_request, guarded by author and repository), dependabot/fetch-metadata@v3 reads the update type, and for version-update:semver-patch the job runs gh pr merge --auto --merge. The merge then waits on main's ruleset and its required check. Covers npm, uv and github-actions; minor and major updates (and any group containing one) still wait for a human.

Known caveat, noted in the header: a merge done by auto-merge enabled with GITHUB_TOKEN does not trigger push workflows, so pages.yml won't deploy these merges. Acceptable, since the npm deps are build tooling only (the next human merge or mise run deploy picks them up) and Python deps aren't deployed.

Lint: actionlint clean, mise run lint:shell clean.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@rdlu
rdlu merged commit f40970e into main Oct 24, 2026
2 checks passed
@rdlu
rdlu deleted the chore/dependabot-automerge branch October 24, 2026 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant