ci: enable gated GitHub-native Renovate automerge - #8
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
🟢 Approval recommended
The change is small, valid Renovate configuration, and aligns with the stated goal of using GitHub-native automerge gated by required checks.
Pull request overview
This PR enables GitHub-native (platform) automerge for Renovate PRs so that dependency updates can be merged automatically once required GitHub verification checks pass, without waiting for a separate hosted Renovate run.
Changes:
- Enable platform-managed automerge in Renovate (
platformAutomerge: true). - Set Renovate automerge mode to PR-based merges (
automergeType: "pr").
File summaries
| File | Description |
|---|---|
| renovate.json | Turns on GitHub-native automerge for Renovate and configures PR-based automerge behavior. |
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
![slopzapper[bot]](https://avatars.githubusercontent.com/in/4527847?s=60&v=4){kind=small}
There was a problem hiding this comment.
✨ CLEAN
The two keys override the shared preset's Renovate-side merge so already-eligible patch, minor, and pin PRs use GitHub-native automerge. automergeType pr matches the preset and the platformAutomerge contract. Update eligibility, digest-manual policy, and squash strategy stay in the preset. The repository ruleset requires the four scan jobs, so the platform merge stays gated.
Problem
Green dependency PRs wait for another hosted Renovate run.
Solution
Use GitHub-native automerge with explicit required verification checks. Preserve the shared update eligibility and release-age policy.
Proof
Repository verification and Renovate configuration validation passed locally. Live auto-merge and the separate non-strict required-check ruleset were read back. Existing administrator write paths retain a bypass only on the new checks; Renovate has none.