Repository navigation

Auto-merge - PR #1329

	name: Auto-merge Dependabot PRs
Check warning on line 1 in .github/workflows/dependabot-auto-merge.yml View workflow run for this annotation GitHub Actions / Auto-merge Dependabot PRs Workflow execution policy warning (evaluate mode) On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
	run-name: Auto-merge - PR #${{ github.event.pull_request.number }}

	on:
	pull_request_target:
	types:
	- opened
	- synchronize
	- reopened

	permissions:
	contents: write
	pull-requests: write

	jobs:
	auto-merge:
	runs-on: ubuntu-latest
	if: github.actor == 'dependabot[bot]'
	steps:
	- name: Fetch Dependabot metadata
	id: metadata
	uses: dependabot/fetch-metadata@v3
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}

	- name: Enable auto-merge
	if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
	run: gh pr merge --auto --squash "$PR_URL"
	env:
	PR_URL: ${{ github.event.pull_request.html_url }}
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Approve PR
	if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
	run: gh pr review --approve "$PR_URL"
	env:
	PR_URL: ${{ github.event.pull_request.html_url }}
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}