Skip to content

Add Dependabot auto-merge workflow#23

Merged
flungo merged 5 commits into
mainfrom
claude/dependabot-auto-merge
May 15, 2026
Merged

Add Dependabot auto-merge workflow#23
flungo merged 5 commits into
mainfrom
claude/dependabot-auto-merge

Conversation

@flungo
Copy link
Copy Markdown
Member

@flungo flungo commented May 15, 2026

Adds a workflow that automatically merges Dependabot PRs once CI passes.

How it works

  • Triggers on any PR opened by dependabot[bot]
  • Uses dependabot/fetch-metadata to identify the PR
  • Calls gh pr merge --auto so the merge only happens after all required status checks pass

Prerequisites (one-time setup)

  • Settings → General → Allow auto-merge must be enabled on the repository
  • A branch protection rule on main must require the ci / docker check to pass — once this PR's CI run completes, the check name will be available to add in the branch protection settings

https://claude.ai/code/session_01EZ5g73mHD6zFsUuvJtMCdw


Generated by Claude Code

claude added 4 commits May 15, 2026 08:04
Automatically merges Dependabot PRs once CI passes. Requires
auto-merge to be enabled in repository Settings → General, and a
branch protection rule on main requiring the CI check to pass so
the merge waits for a successful image build.

https://claude.ai/code/session_01EZ5g73mHD6zFsUuvJtMCdw
Simpler approach: auto-merge: true in dependabot.yml requests auto-merge
on each Dependabot PR directly, removing the need for a separate workflow.
Branch protection on main still gates the merge on CI passing.

https://claude.ai/code/session_01EZ5g73mHD6zFsUuvJtMCdw
auto-merge is not a valid dependabot.yml key; the workflow approach
is the correct mechanism for automatically merging Dependabot PRs.
Removed dependabot/fetch-metadata since it isn't needed for a blanket
auto-merge of all Dependabot PRs.

https://claude.ai/code/session_01EZ5g73mHD6zFsUuvJtMCdw
A skipped step inside a running job doesn't create a separate check
entry in the PR UI, unlike a skipped job. This keeps the checks list
clean for non-Dependabot PRs while still enabling auto-merge when
Dependabot's CI passes.

https://claude.ai/code/session_01EZ5g73mHD6zFsUuvJtMCdw
@flungo flungo enabled auto-merge (squash) May 15, 2026 08:29
@flungo flungo merged commit b3f9c48 into main May 15, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants