From 5b43f1fe12325cf8aad0d71cd467a1c3a2a1bdfd Mon Sep 17 00:00:00 2001 From: Sam Bull Date: Thu, 12 Mar 2026 18:21:30 +0000 Subject: [PATCH 1/2] Configure Dependabot --- .github/dependabot.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..00840328a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,21 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" + + - package-ecosystem: "uv" + directory: "/" + allow: + - dependency-type: "all" + schedule: + interval: "daily" + open-pull-requests-limit: 10 + + - package-ecosystem: "docker" + directories: "/docker/*/" + labels: + - dependencies + schedule: + interval: "monthly" From 481a75af1d2bb6d03da3c254f5e7d2359ecd3d89 Mon Sep 17 00:00:00 2001 From: Sam Bull Date: Thu, 12 Mar 2026 18:27:28 +0000 Subject: [PATCH 2/2] Create auto-merge.yml --- .github/workflows/auto-merge.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/auto-merge.yml diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml new file mode 100644 index 000000000..56575750f --- /dev/null +++ b/.github/workflows/auto-merge.yml @@ -0,0 +1,22 @@ +name: Dependabot auto-merge +on: pull_request_target + +permissions: + pull-requests: write + contents: write + +jobs: + dependabot: + runs-on: ubuntu-latest + if: ${{ github.actor == 'dependabot[bot]' }} + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@v2 + with: + github-token: "${{ secrets.GITHUB_TOKEN }}" + - name: Enable auto-merge for Dependabot PRs + run: gh pr merge --auto --squash "$PR_URL" + env: + PR_URL: ${{github.event.pull_request.html_url}} + GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}