Skip to content

chore: Dependabot weekly updates + patch/minor auto-merge - #1

Merged
Exios66 merged 1 commit into
mainfrom
chore/dependabot-auto-merge
Sep 17, 2026
Merged

Exios66 merged 1 commit into
mainfrom
chore/dependabot-auto-merge

Conversation

@Exios66

@Exios66 Exios66 commented Sep 17, 2026

Copy link
Copy Markdown
Member

Summary

  • Adds/updates .github/dependabot.yml for detected ecosystems (weekly Mon 08:00 America/Chicago)
  • Adds .github/workflows/dependabot-auto-merge.yml to squash-auto-merge patch/minor Dependabot PRs when CI is green
  • Majors stay manual

Notes for Jack

  • Enable Allow auto-merge in repo Settings → General (this PR rollout also attempts to enable via API)
  • Prefer branch protection with at least one required status check so auto-merge waits for green CI
  • Dependabot version updates activate from this config; optionally enable Dependabot alerts / security updates under Settings → Code security

- Cover detected package ecosystems with weekly Monday 08:00 America/Chicago schedule
- Group routine bumps (github-actions, python minor/patch) to reduce PR noise
- Auto-merge Dependabot semver-patch and semver-minor via squash when checks are green
- Majors remain manual review PRs
@Exios66
Exios66 merged commit fab56e1 into main Sep 17, 2026
1 check passed
@Exios66
Exios66 deleted the chore/dependabot-auto-merge branch September 17, 2026 22:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant