From 6b0fed5eae12b26293cfd555b89842cf7b5c6e94 Mon Sep 17 00:00:00 2001 From: Imran Siddique <45405841+imran-siddique@users.noreply.github.com> Date: Wed, 14 Oct 2026 22:00:22 -0700 Subject: [PATCH] ci: stop queueing auto-merge for Dependabot PRs Main requires only the maintainer gate, which checks approval and not test results. integrations has no single CI workflow to require, since each integration's tests run on its own path filter, so a queued auto-merge could land an update whose tests are red. Grouping stays; merging goes back to a maintainer who has read the checks. Co-Authored-By: Claude Opus 5.5 Signed-off-by: Imran Siddique <45405841+imran-siddique@users.noreply.github.com> --- .github/workflows/dependabot-auto-merge.yml | 26 --------------------- 1 file changed, 26 deletions(-) delete mode 100644 .github/workflows/dependabot-auto-merge.yml diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml deleted file mode 100644 index 163ebbf..0000000 --- a/.github/workflows/dependabot-auto-merge.yml +++ /dev/null @@ -1,26 +0,0 @@ -name: Dependabot auto-merge - -# Queues auto-merge on Dependabot PRs. It approves nothing: the PR still needs -# a maintainer approval of the current head and every required check, and -# GitHub merges it only once both are satisfied. -on: - pull_request: - types: [opened, reopened] - branches: [main] - -permissions: - contents: read - -jobs: - enable: - if: github.event.pull_request.user.login == 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository - runs-on: ubuntu-latest - permissions: - contents: write - pull-requests: write - steps: - - name: Enable auto-merge - run: gh pr merge --auto --squash "$PR_URL" - env: - PR_URL: ${{ github.event.pull_request.html_url }} - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}