ci: use explicit version for fetch-metadata version comment

[wochinge]

Disclaimer: Experimental PR review

Greptile Summary

This PR updates the human-readable version comment on the dependabot/fetch-metadata action from # v3 to # v3.0.0. The underlying SHA pin (ffa630c65fa7e0ecfa0625b5ceda64399aea1b36) is unchanged, so there is no functional impact.

Confidence Score: 5/5

Safe to merge — only a comment change, no logic or pin modifications.

The change is purely cosmetic (comment text), with the actual SHA pin left intact. No P0/P1 findings.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/dependabot-merge.yml	Updates the version comment on the pinned dependabot/fetch-metadata action from # v3 to # v3.0.0; the SHA pin itself is unchanged.

Sequence Diagram

sequenceDiagram
    participant GH as GitHub
    participant WF as dependabot-merge.yml
    participant FM as dependabot/fetch-metadata@SHA
    participant GH_CLI as gh CLI

    GH->>WF: pull_request event (dependabot[bot])
    WF->>FM: Fetch PR metadata (github-token)
    FM-->>WF: update-type output
    alt update-type == version-update:semver-patch
        WF->>GH_CLI: gh pr merge --auto --squash $PR_URL
        GH_CLI-->>GH: Auto-merge enabled
    end

Loading

_{Reviews (1): Last reviewed commit: "ci: use explicit version" | Re-trigger Greptile}

[github-actions]

@claude review

[claude]

LGTM — trivial comment fix updating the version tag from v3 to v3.0.0 with no functional changes.

Extended reasoning...

Overview

Single-line change in a CI workflow file: updates a comment on a pinned action SHA from v3 to v3.0.0. No code logic, no action version, no SHA is changed.

Security risks

None. The pinned SHA remains identical; only the human-readable version comment is updated for clarity.

Level of scrutiny

Minimal — this is purely a documentation/comment fix in a CI file.

Other factors

No bugs found, no outstanding reviewer comments, trivial mechanical change.