From 01f20bc9a28a87282811cc7c3029a2dab0ce98f6 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 21 Mar 2026 11:53:04 +0000
Subject: [PATCH 1/2] Initial plan


From 8b0df715fcca7e3acbbfd01b37851c0865b3754d Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 21 Mar 2026 11:54:22 +0000
Subject: [PATCH 2/2] ci: remove pull_request triggers from CodeQL and Semgrep
 to unblock auto-merge

Co-authored-by: MightyPrytanis <219587333+MightyPrytanis@users.noreply.github.com>
Agent-Logs-Url: https://github.com/MightyPrytanis/codebase/sessions/e183808e-b928-4557-86c7-fb2804a21472
---
 .github/workflows/codeql.yml  | 11 +----------
 .github/workflows/semgrep.yml | 11 +----------
 2 files changed, 2 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 3f08955b..7ac7aead 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -22,16 +22,7 @@ on:
       - 'docs/**'
       - '.github/workflows/codeql.yml'
       - '.github/codeql-config.yml'
-  pull_request:
-    branches: [ "main" ]
-    paths:
-      - 'Cyrano/**'
-      - 'Labs/Potemkin/**'
-      - 'apps/lexfiat/**'
-      - 'apps/arkiver/**'
-      - 'docs/**'
-      - '.github/workflows/codeql.yml'
-      - '.github/codeql-config.yml'
+  # pull_request trigger removed - was blocking Dependabot auto-merges
   schedule:
     - cron: '25 14 * * 4'
 
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index d7bc6f46..4712de19 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -20,16 +20,7 @@ on:
       - 'apps/arkiver/**'
       - 'docs/**'
       - '.github/workflows/semgrep.yml'
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [ "main" ]
-    paths:
-      - 'Cyrano/**'
-      - 'Labs/Potemkin/**'
-      - 'apps/lexfiat/**'
-      - 'apps/arkiver/**'
-      - 'docs/**'
-      - '.github/workflows/semgrep.yml'
+  # pull_request trigger removed - was blocking Dependabot auto-merges
   schedule:
     - cron: '20 19 * * 6'