From 7cf71718982ce9a722eec74c6448b7c45348a281 Mon Sep 17 00:00:00 2001
From: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com>
Date: Thu, 21 May 2026 00:13:57 +0000
Subject: [PATCH 1/3] =?UTF-8?q?feat:=20implement=20issue=20#85=20=E2=80=94?=
 =?UTF-8?q?=20Compliance:=20unpinned-actions-dependabot-automerge.yml?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/dependabot-automerge.yml | 12 ++++++------
 .gitignore                                 |  1 +
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 845c3295..0d3d1549 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -6,12 +6,12 @@
 # AGENTS — READ BEFORE EDITING:
 #   • This file is a THIN CALLER STUB. All eligibility logic and the GitHub
 #     App token dance live in the reusable workflow above.
-#   • You MAY change: nothing in this file in normal use. Adopt verbatim.
+#   • You MAY change: the SHA in the `uses:` line when upgrading the reusable
+#     workflow version (bump SHA to the desired tag/commit of petry-projects/.github).
 #   • You MUST NOT change: trigger event (must be `pull_request_target`),
-#     the `uses:` line, `secrets: inherit`, or the job-level `permissions:`
-#     block — reusable workflows can be granted no more permissions than the
-#     calling job has, so removing the stanza breaks the reusable's gh API
-#     calls.
+#     `secrets: inherit`, or the job-level `permissions:` block — reusable
+#     workflows can be granted no more permissions than the calling job has,
+#     so removing the stanza breaks the reusable's gh API calls.
 #   • If you need different behaviour, open a PR against the reusable in the
 #     central repo.
 # ─────────────────────────────────────────────────────────────────────────────
@@ -35,5 +35,5 @@ jobs:
     permissions:
       contents: read
       pull-requests: read
-    uses: petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml@v1
+    uses: petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml@d3d768dabb7f28cc63283cdfe48630da53700e50 # v1
     secrets: inherit
diff --git a/.gitignore b/.gitignore
index ec1c4ebf..1e03ba7f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,3 +11,4 @@ _bmad-output/
 .env
 *.pem
 *.key
+.dev-lead/

From 5ac0d194f5577f3cf3a6368c535a36e17212e955 Mon Sep 17 00:00:00 2001
From: Don Petry <36422719+don-petry@users.noreply.github.com>
Date: Thu, 21 May 2026 09:24:46 -0500
Subject: [PATCH 2/3] ci: trigger CI for compliance PR #179

---
 .gitignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitignore b/.gitignore
index 2543d9ad..f933cba1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -407,3 +407,4 @@ _bmad-output/
 *.pem
 *.key
 .dev-lead/
+# compliance-ci-trigger

From 713ab9a3eb1a9111d3f714404d66bea960160156 Mon Sep 17 00:00:00 2001
From: Don Petry <36422719+don-petry@users.noreply.github.com>
Date: Thu, 21 May 2026 09:41:55 -0500
Subject: [PATCH 3/3] ci: trigger CI for compliance PR

---
 .gitignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitignore b/.gitignore
index f933cba1..43de4a81 100644
--- a/.gitignore
+++ b/.gitignore
@@ -408,3 +408,4 @@ _bmad-output/
 *.key
 .dev-lead/
 # compliance-ci-trigger
+# ci-trigger-179