Skip to content

v0.5.0 - Dependabot auto-merge policy

Choose a tag to compare

View all tags
@VictorNain26 VictorNain26 released this 19 May 08:01
· 27 commits to main since this release
v0.5.0
87ba26b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Adds a Dependabot auto-merge policy workflow. Reduces weekly PR noise on safe bumps without giving up human review for the risky ones.

Policy

Update Action
Patch (any ecosystem, any dep type) Auto-merge once CI green
Minor — dev deps (ruff, mypy, pytest*) Auto-merge once CI green
Minor — GitHub Actions Auto-merge once CI green
Minor — runtime (mcp, httpx, pydantic, uvicorn) Manual review, workflow posts a comment
Major (any ecosystem) Manual review, workflow posts a comment

Setup

  • Repo-level Allow auto-merge is now ON.
  • Workflow uses dependabot/fetch-metadata@v2 to introspect each bump.
  • Recommendation: enable branch protection on main requiring the CI status checks so auto-merge waits for the matrix to pass.

Full changelog

https://github.com/VictorNain26/pexels-mcp-server/blob/v0.5.0/CHANGELOG.md

Assets 2
Loading