From 7efc706650cc1169b2467f869627e0b2c0f284df Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bobo=20B=C3=A4ck=20Engstr=C3=B6m?= Date: Mon, 4 May 2026 09:36:40 +0200 Subject: [PATCH 1/2] chore(dependabot): add a 7 days cooldown for minor and path updates MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Bobo Bäck Engström --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 27f2246..fbf92bd 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,7 +4,13 @@ updates: directory: / schedule: interval: weekly + cooldown: + semver-minor-days: 7 + semver-patch-days: 7 - package-ecosystem: uv directory: / schedule: interval: weekly + cooldown: + semver-minor-days: 7 + semver-patch-days: 7 From dd76670d93d3ccdfbab3336b295edac51cc5d9de Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bobo=20B=C3=A4ck=20Engstr=C3=B6m?= Date: Mon, 4 May 2026 09:41:05 +0200 Subject: [PATCH 2/2] chore(ci): add automerge for dependabot PRs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Bobo Bäck Engström --- .github/workflows/dependabot-automerging.yml | 31 ++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/dependabot-automerging.yml diff --git a/.github/workflows/dependabot-automerging.yml b/.github/workflows/dependabot-automerging.yml new file mode 100644 index 0000000..12483d5 --- /dev/null +++ b/.github/workflows/dependabot-automerging.yml @@ -0,0 +1,31 @@ +name: Dependabot auto-merge + +on: pull_request + +permissions: + contents: write + pull-requests: write + +jobs: + dependabot: + runs-on: ubuntu-latest + if: github.event.pull_request.user.login == 'dependabot[bot]' + + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 #v3.1.0 + with: + github-token: "${{ secrets.GITHUB_TOKEN }}" + + - name: Enable auto-merge for Dependabot PRs + if: | + steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' && + steps.metadata.outputs.update-type == 'version-update:semver-patch' || + steps.metadata.outputs.update-type == 'version-update:semver-minor' + run: | + gh pr comment "$PR_URL" --body "🤖 Auto-merge enabled for patch/minor update" + gh pr merge --auto --merge "$PR_URL" + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}