feat: scheduled automerge + resume generator workflow

[jbdevprimary]

Summary

• Automerge: Replace pull_request trigger with nightly schedule (6 AM UTC) + workflow_dispatch. Runs on default branch context with full secret access — no more empty CI_GITHUB_TOKEN on dependabot PRs, no more self-approval failures on release-please PRs.
• Resume generator: New workflow triggered by PR changes to resume.json or generator scripts. Regenerates PDF/DOCX, commits back to PR branch if changed, comments on PR.

What was broken

Automerge on pull_request event had two fatal issues:

1. Dependabot PRs don't expose repo secrets → CI_GITHUB_TOKEN was empty → gh CLI failed
2. Release-please PRs created by the PAT couldn't be approved by the same PAT → "cannot approve your own pull request"

Test plan

• CI passes
• After merge, trigger automerge manually via workflow_dispatch to process the 8 stuck dependabot PRs
• Future resume.json changes in PRs trigger PDF/DOCX regeneration

🤖 Generated with Claude Code

[gemini-code-assist]

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

[coderabbitai]

Warning

Rate limit exceeded

@jbdevprimary has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 17 minutes and 27 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 9a549913-2339-4f92-bfb9-c63e8aa3f2bc

📥 Commits

Reviewing files that changed from the base of the PR and between d43f72c and ff9f080.

📒 Files selected for processing (2)

• .github/workflows/automerge.yml
• .github/workflows/resume.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch ci/scheduled-automerge-and-resume-workflow

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[amazon-q-developer]

Summary

This PR refactors the automerge workflow to run on a schedule instead of PR events, and adds a new resume generator workflow. The approach solves the secret access and self-approval issues mentioned in the PR description.

Critical Issues Found

Automerge workflow:

• CI check validation uses brittle string parsing that may silently fail when gh pr checks encounters errors, potentially allowing PRs with failing checks to merge
• Missing error handling for gh pr list command failures could cause jq parsing errors or silent failures

Resume generator workflow:

• Missing file existence checks before git diff will cause workflow failure on first run or if files are deleted
• No error handling for resume generation failures could result in committing corrupted or incomplete files

All identified issues have blocking severity and must be fixed before merge to prevent workflow failures and incorrect automerge behavior.

---

You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.