Skip to content

ci: auto-merge Dependabot patch and minor (<=2) bumps when unit-test passes#242

Merged
shano merged 1 commit into
mainfrom
feat/dependabot-auto-merge
Jun 9, 2026
Merged

ci: auto-merge Dependabot patch and minor (<=2) bumps when unit-test passes#242
shano merged 1 commit into
mainfrom
feat/dependabot-auto-merge

Conversation

@shano

@shano shano commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Adds a dependabot-auto-merge workflow triggered on pull_request_target from dependabot[bot].

Logic

  • Patch bumps → always auto-merge if CI passes
  • Minor bumps, ≤2 version distance → auto-merge if CI passes
  • Minor bumps, >2 version distance → skip, manual review required
  • Major bumps → skip, manual review required

The workflow waits for the unit-test check to pass (via gh pr checks --watch) before merging. If checks fail, no merge happens.

Example outcomes

Bump Result
0.5.0 → 0.5.1 patch ✅ auto-merged
3.18.5 → 3.20.2 minor +2 ✅ auto-merged
1.68.1 → 1.79.3 minor +11 ❌ manual
any major ❌ manual

Part of epic: syntasso/roadmap#125

@shano shano merged commit ee0d3f0 into main Jun 9, 2026
3 checks passed
@shano shano deleted the feat/dependabot-auto-merge branch June 9, 2026 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants