Skip to content

Use a GitHub App for Dependabot merges - #185

Merged
ruben-arts merged 2 commits into
mainfrom
use-github-app-for-dependabot-merges
Sep 15, 2026
Merged

ruben-arts merged 2 commits into
mainfrom
use-github-app-for-dependabot-merges

Conversation

@Hofer-Julian

@Hofer-Julian Hofer-Julian commented Sep 15, 2026

Copy link
Copy Markdown
Contributor
  • Keep Dependabot approval on GITHUB_TOKEN, and use a repository-scoped GitHub App token for merging so checks and deployment run on the resulting main commit.
  • Match the PR head to the checked commit before enabling auto-merge.
  • Auto-merge patch updates and minor updates for dependencies already on 1.0.0 or later. Require manual review for 0.x minor updates, major updates, and missing or unrecognized version metadata.
  • Run the Python merge policy through pixi run check-dependabot-merge from the trusted base commit, without restoring PR environment caches.

@Hofer-Julian
Hofer-Julian marked this pull request as ready for review September 15, 2026 09:05
@ruben-arts
ruben-arts merged commit 36c4cc9 into main Sep 15, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants