From 6fba407ea10500206cc76e86200b91b0120a4b25 Mon Sep 17 00:00:00 2001
From: Jakob Jensen <jakobj@jakobj.dk>
Date: Sun, 12 Oct 2025 20:03:48 +0200
Subject: [PATCH 1/2] Listen for closed prs

---
 .github/workflows/dependabot.yaml | 21 +++++++++------------
 1 file changed, 9 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/dependabot.yaml b/.github/workflows/dependabot.yaml
index 586f903..f6c2160 100644
--- a/.github/workflows/dependabot.yaml
+++ b/.github/workflows/dependabot.yaml
@@ -1,14 +1,17 @@
 name: Dependabot Auto Release
 
 on:
-  push:
-    branches:
-      - main
+  pull_request:
+    types:
+      - closed
 
 jobs:
   version:
     name: Setup version
-    if: github.actor == 'dependabot[bot]'
+    if: >
+      github.actor == 'dependabot[bot]' &&
+      github.event.pull_request.merged == true &&
+      github.event.pull_request.base.ref == 'main'
     runs-on: ubuntu-latest
     outputs:
       version: ${{ steps.bump.outputs.new_version }}
@@ -16,6 +19,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
         with:
+          ref: main
           fetch-depth: 0
 
       - name: Determine next patch version
@@ -27,17 +31,10 @@ jobs:
           new="$major.$minor.$((patch + 1))"
           echo "new_version=$new" >> $GITHUB_OUTPUT
 
-      - name: Tag the release
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git tag ${{ steps.bump.outputs.new_version }}
-          git push origin ${{ steps.bump.outputs.new_version }}
-
   release:
     name: Build release
     needs: version
     uses: ./.github/workflows/build-release.yaml
     with:
       version: ${{ needs.version.outputs.version }}
-      event_name: push
+      event_name: release

From 931ff502d893477bc9715e8f38c2e65468431f6d Mon Sep 17 00:00:00 2001
From: Jakob Jensen <jakobj@jakobj.dk>
Date: Sun, 12 Oct 2025 20:05:27 +0200
Subject: [PATCH 2/2] debump checkout

---
 .github/workflows/dependabot.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/dependabot.yaml b/.github/workflows/dependabot.yaml
index f6c2160..7139ed8 100644
--- a/.github/workflows/dependabot.yaml
+++ b/.github/workflows/dependabot.yaml
@@ -17,7 +17,7 @@ jobs:
       version: ${{ steps.bump.outputs.new_version }}
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v4
         with:
           ref: main
           fetch-depth: 0