Skip to content

Conversation

@PhilippSchmelter
Copy link
Contributor

Close #84
This pull request adds a new GitHub Actions workflow to automate the approval and merging of patch-level Dependabot pull requests, while ensuring that pre-release versions are not merged. The workflow is triggered only for Dependabot PRs in the ie3-institute/python-project repository.

Automation of Dependabot PRs:

  • Added .github/workflows/dependabot-auto-merge.yml to automatically approve and enable auto-merge for Dependabot PRs that perform patch-level semantic version updates, using the GitHub CLI and metadata from the Dependabot action.

Pre-release safeguards:

  • Implemented a check to detect and stop the workflow if the new version in the PR is a pre-release (e.g., alpha, beta, release candidate, or dev versions), preventing accidental merging of unstable dependencies.

Copy link
Member

@danielfeismann danielfeismann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@danielfeismann danielfeismann merged commit 68632c7 into main Oct 29, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dependabot Patch Auto Merge

3 participants