Skip to content

ci: add gated Dependabot auto-merge policies#15

Open
clemensv wants to merge 1 commit intomainfrom
chore/dependabot-gated-automerge
Open

ci: add gated Dependabot auto-merge policies#15
clemensv wants to merge 1 commit intomainfrom
chore/dependabot-gated-automerge

Conversation

@clemensv
Copy link
Copy Markdown
Collaborator

@clemensv clemensv commented Mar 24, 2026

Summary

  • group GitHub Actions Dependabot updates (minor/patch) into one PR
  • add a Dependabot auto-merge workflow with a low-risk gate
  • auto-label low-risk Dependabot PRs with automerge-safe
  • auto-enable squash merge for:
    • GitHub Actions workflow-only non-major updates
    • npm direct development dependency semver minor/patch updates

Why

This reduces Dependabot PR noise and safely automates low-risk updates while keeping major or broader-scope changes manual.

Validation

  • workflow and dependabot YAML checked for editor diagnostics (no errors)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant