Skip to content

ci(deps): auto-approve / auto-merge dependencies from dependabot#39

Merged
mwbrooks merged 1 commit intomainfrom
mwbrooks-dependabot-auto-merge
Feb 4, 2026
Merged

ci(deps): auto-approve / auto-merge dependencies from dependabot#39
mwbrooks merged 1 commit intomainfrom
mwbrooks-dependabot-auto-merge

Conversation

@mwbrooks
Copy link
Member

@mwbrooks mwbrooks commented Feb 4, 2026

Summary

Add a GitHub Actions workflow to auto-approve and auto-merge Dependabot pull requests for patch and minor version updates.

This reduces maintenance burden by automatically handling low-risk dependency updates while still requiring manual review for major version bumps.

Repository Settings Required

To enable auto-merge functionality, the following repository settings must be configured:

  • Settings → General → Pull Requests

    • ✅ Allow auto-merge
  • Settings → Branches → main branch protection rule

    • ✅ Require status checks to pass before merging
      • Add required checks: Build, Unit Tests
  • Settings → Actions → General → Workflow permissions

    • ✅ Allow GitHub Actions to create and approve pull requests

Requirements (place an x in each [ ])

@mwbrooks mwbrooks requested a review from a team as a code owner February 4, 2026 00:21
@mwbrooks mwbrooks added the dependencies Pull requests that update a dependency file label Feb 4, 2026
@mwbrooks mwbrooks self-assigned this Feb 4, 2026
Copy link
Member

@zimeg zimeg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - clean dependabot auto-merge workflow

@mwbrooks
Copy link
Member Author

mwbrooks commented Feb 4, 2026

Thanks for the review @zimeg!

This repo required all of the settings to be configured. For required status checks, I chose:

  • build (3.7)
  • build (3.8)
  • build (3.9)
  • build (3.10)
  • build (3.11)

@mwbrooks mwbrooks merged commit 61eb52a into main Feb 4, 2026
9 checks passed
@mwbrooks mwbrooks deleted the mwbrooks-dependabot-auto-merge branch February 4, 2026 03:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants