Skip to content

Add Dependabot/Snyk auto-merge workflow - #78

Merged
Luen merged 1 commit into
mainfrom
chore/dependabot-auto-merge
Aug 14, 2026
Merged

Add Dependabot/Snyk auto-merge workflow#78
Luen merged 1 commit into
mainfrom
chore/dependabot-auto-merge

Conversation

@Luen

@LuenLuen commented Aug 14, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Add .github/workflows/dependabot-auto-merge.yml for Dependabot & Snyk patch/minor auto-merge.
  • Validates with install (+ lint/format/test/build per repo).
  • Pins Actions SHAs: checkout@v7.0.1, setup-node@v7.0.0 / setup-python@v7.0.0, dependabot/fetch-metadata@v3.1.0.
  • Majors stay manual. Uses pull_request (not pull_request_target).

Repo settings to enable

  1. Allow auto-merge
  2. Actions workflow permissions: Read and write
  3. Prefer squash merges
  4. Require status check Validate dependency update (recommended)

Co-authored-by: Cursor <cursoragent@cursor.com>
@Luen
Luen merged commit d37e8dc into mainAug 14, 2026
@Luen
Luen deleted the chore/dependabot-auto-merge branch August 14, 2026 02:04
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@Luen