Repository navigation
ci: add Dependabot and auto-merge for patch/minor updates - #1
Merged
Merged
Conversation
- Weekly Dependabot updates for GitHub Actions - Workflow enabling auto-merge (squash) on Dependabot PRs for patch and minor updates; major updates stay open for review Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
.github/dependabot.yml): weekly version updates for GitHub Actions (the only dependencies in this repo)..github/workflows/dependabot-auto-merge.yml): on Dependabot PRs, enables squash auto-merge for patch and minor updates only. Major updates are left open for manual review, sincemaindeploys straight to production.Required repository settings
gh pr merge --autofails.mainwith required status checks, so auto-merge waits for them instead of merging immediately.Notes
GITHUB_TOKENdo not trigger other workflows, so a merged Dependabot PR will not redeploy the Worker by itself. This is fine as these updates only touch workflow files; the next regular push deploys with the new versions.🤖 Generated with Claude Code