Skip to content

ci: auto-merge green patch/minor Dependabot PRs - #528

Merged
dsdevq merged 1 commit into
mainfrom
ci/dependabot-automerge
Aug 31, 2026
Merged

dsdevq merged 1 commit into
mainfrom
ci/dependabot-automerge

Conversation

@dsdevq

@dsdevq dsdevq commented Aug 31, 2026

Copy link
Copy Markdown
Collaborator

Follow-up to #510 (Denys approved auto-merge 2026-08-30). dependabot/fetch-metadata classifies each Dependabot PR; patch + minor updates get gh pr merge --auto --squash, so GitHub merges them only once every required check is green (CI, Trivy, coverage ratchets — the existing gates are the safety net). Majors and red PRs stay open for a human/agent decision. Repo setting allow_auto_merge enabled via API.

Validation

Workflow-only; exercised by the next Dependabot PR (weekly Monday run). Grouped PRs report the highest contained semver level, so a group with a major stays manual.

🤖 Generated with Claude Code

Follow-up to #510: patch+minor updates squash-merge themselves once all
required checks pass (repo allow_auto_merge flipped on). Majors and red
PRs stay open for review.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@dsdevq
dsdevq merged commit 1182fc5 into main Aug 31, 2026
6 checks passed
@dsdevq
dsdevq deleted the ci/dependabot-automerge branch August 31, 2026 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant