From 846cc9ca9cec77b851e33019e3e98d0c2c2a8068 Mon Sep 17 00:00:00 2001
From: Maarten Bruna <14947039+ictbeheer@users.noreply.github.com>
Date: Fri, 3 Jul 2026 14:36:04 +0200
Subject: [PATCH] feat: dependabot composite action

---
 dependabot-automerge/action.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 dependabot-automerge/action.yml

diff --git a/dependabot-automerge/action.yml b/dependabot-automerge/action.yml
new file mode 100644
index 0000000..8a8b7b8
--- /dev/null
+++ b/dependabot-automerge/action.yml
@@ -0,0 +1,16 @@
+name: Dependabot automerge
+description: Automatically approves and merges Dependabot pull requests.
+inputs:
+  github-token:
+    description: GitHub token with write permissions to the repository.
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - name: Enable auto-merge for Dependabot PRs
+      if: github.event.pull_request.user.login == 'dependabot[bot]'
+      shell: bash
+      run: gh pr review "$PR_URL" --approve && gh pr merge "$PR_URL" --admin --rebase
+      env:
+        PR_URL: ${{github.event.pull_request.html_url}}
+        GH_TOKEN: ${{inputs.github-token}}
\ No newline at end of file