Skip to content

Conversation

@mwbrooks
Copy link
Member

@mwbrooks mwbrooks commented Feb 4, 2026

Summary

Add a GitHub Actions workflow to auto-approve and auto-merge Dependabot pull requests for patch and minor version updates.

This reduces maintenance burden by automatically handling low-risk dependency updates while still requiring manual review for major version bumps.

Repository Settings Required

To enable auto-merge functionality, the following repository settings must be configured:

  • Settings → General → Pull Requests

    • ✅ Allow auto-merge
  • Settings → Branches → main branch protection rule

    • ✅ Require status checks to pass before merging
      • Add required checks: Build, Unit Tests
  • Settings → Actions → General → Workflow permissions

    • ✅ Allow GitHub Actions to create and approve pull requests

Requirements (place an x in each [ ])

@mwbrooks mwbrooks requested a review from a team as a code owner February 4, 2026 00:19
@mwbrooks mwbrooks added dependencies Pull requests that update a dependency file semver:patch labels Feb 4, 2026
@mwbrooks mwbrooks self-assigned this Feb 4, 2026
@codecov
Copy link

codecov bot commented Feb 4, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.54%. Comparing base (6918115) to head (779630c).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1434   +/-   ##
=======================================
  Coverage   90.54%   90.54%           
=======================================
  Files         222      222           
  Lines        7129     7129           
=======================================
  Hits         6455     6455           
  Misses        674      674           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Member

@zimeg zimeg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - clean dependabot auto-merge workflow

@mwbrooks
Copy link
Member Author

mwbrooks commented Feb 4, 2026

Thanks @zimeg!

I've confirmed that the repo is configured correctly and has status check requirements for the Linting, Typecheck, and Unit Tests.

@mwbrooks mwbrooks merged commit c3929df into main Feb 4, 2026
16 checks passed
@mwbrooks mwbrooks deleted the mwbrooks-dependabot-auto-merge branch February 4, 2026 02:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file semver:patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants