Skip to content

ci: fix dependabot auto-merge for grouped updates#2657

Open
adekbadek wants to merge 1 commit intotrunkfrom
ci/fix-dependabot-auto-merge-grouped
Open

ci: fix dependabot auto-merge for grouped updates#2657
adekbadek wants to merge 1 commit intotrunkfrom
ci/fix-dependabot-auto-merge-grouped

Conversation

@adekbadek
Copy link
Copy Markdown
Member

Summary

  • Fix Dependabot auto-merge workflow to handle grouped (multi-dependency) updates
  • dependabot/fetch-metadata@v2 doesn't reliably populate update-type for grouped PRs, so the approve/merge steps were silently skipped
  • Adds a fallback condition: if dependency-group is set and update-type doesn't contain semver-major, approve and auto-merge

Test plan

  • Verify the workflow triggers correctly on the next grouped Dependabot PR
  • Verify major version bumps in grouped updates are NOT auto-approved

@adekbadek adekbadek requested a review from a team as a code owner March 26, 2026 10:34
@adekbadek adekbadek marked this pull request as draft March 26, 2026 22:33
@adekbadek adekbadek force-pushed the ci/fix-dependabot-auto-merge-grouped branch from 412547d to c749104 Compare March 26, 2026 22:41
@adekbadek adekbadek marked this pull request as ready for review March 26, 2026 22:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant