Skip to content

Conversation

@Marenz
Copy link
Contributor

@Marenz Marenz commented Oct 20, 2025

Summary

  • Add GitHub workflow to automatically approve and merge Dependabot PRs
  • Uses merge method for clean commit history

Copilot AI review requested due to automatic review settings October 20, 2025 13:30
@Marenz Marenz requested review from a team as code owners October 20, 2025 13:30
@github-actions github-actions bot added the part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) label Oct 20, 2025
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds a GitHub workflow to automatically approve and merge Dependabot pull requests, enabling automated dependency updates with minimal manual intervention.

Key changes:

  • Introduces a new GitHub Actions workflow that triggers on pull requests
  • Implements automatic approval and merging specifically for Dependabot-created PRs
  • Configures the merge method to use 'merge' for maintaining clean commit history

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.


on:
pull_request:

Copy link

Copilot AI Oct 20, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow triggers on all pull request events without specifying event types. This could cause unnecessary workflow runs. Consider adding specific event types like 'opened' and 'synchronize', or use 'pull_request_target' with appropriate security considerations for auto-merge scenarios.

Suggested change
types: [opened, synchronize]

Copilot uses AI. Check for mistakes.
@Marenz Marenz force-pushed the add-dependabot-workflow branch from 4decda3 to 7269288 Compare October 20, 2025 15:17
Signed-off-by: Mathias L. Baumann <[email protected]>
@Marenz Marenz force-pushed the add-dependabot-workflow branch from 7269288 to 0423e3f Compare October 22, 2025 10:01
@Marenz Marenz enabled auto-merge October 28, 2025 15:43
@Marenz
Copy link
Contributor Author

Marenz commented Oct 28, 2025

This is ready but needs repo owner approval. Also probably will not work if that is enabled as the merge bot needs approval access

@Marenz Marenz added this pull request to the merge queue Nov 3, 2025
Merged via the queue into frequenz-floss:v0.x.x with commit f687119 Nov 3, 2025
5 checks passed
@Marenz Marenz deleted the add-dependabot-workflow branch November 3, 2025 11:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

part:tooling Affects the development tooling (CI, deployment, dependency management, etc.)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants