From b98d353fae9d3a8ed5b1a3a8b5d23559fcbbd09e Mon Sep 17 00:00:00 2001 From: Naseem AlNaji Date: Thu, 6 Aug 2026 13:43:49 -0400 Subject: [PATCH] chore: enable Dependabot with org auto-merge policy Weekly grouped version updates (7d cooldown), security updates via org config. Patch/minor auto-merge behind CI per the org standard-changes policy where CI gating exists; majors and critical security updates require human review. --- .github/dependabot.yml | 33 +++++++++++++++++++++ .github/workflows/dependabot-auto-merge.yml | 12 ++++++++ 2 files changed, 45 insertions(+) create mode 100644 .github/dependabot.yml create mode 100644 .github/workflows/dependabot-auto-merge.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..fb82bab --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,33 @@ +version: 2 +updates: + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + cooldown: + default-days: 7 + semver-major-days: 30 + groups: + npm-minor-patch: + applies-to: version-updates + patterns: ["*"] + update-types: ["minor", "patch"] + npm-security: + applies-to: security-updates + patterns: ["*"] + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + cooldown: + default-days: 7 + groups: + github-actions-minor-patch: + applies-to: version-updates + patterns: ["*"] + update-types: ["minor", "patch"] + github-actions-security: + applies-to: security-updates + patterns: ["*"] diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml new file mode 100644 index 0000000..2717b28 --- /dev/null +++ b/.github/workflows/dependabot-auto-merge.yml @@ -0,0 +1,12 @@ +name: Dependabot auto-merge + +on: pull_request + +permissions: + contents: write + pull-requests: write + +jobs: + auto-merge: + if: github.event.pull_request.user.login == 'dependabot[bot]' + uses: agentcathq/.github/.github/workflows/dependabot-auto-merge.yml@main