Skip to content
dependabot-auto-merge

Guard httpx 1.x imports, pin client extras, and widen CI #5

Sign in to view logs

Guard httpx 1.x imports, pin client extras, and widen CI

Guard httpx 1.x imports, pin client extras, and widen CI #5

Workflow file for this run

.github/workflows/dependabot-auto-merge.yml at c810d6c
# Approve Dependabot pull requests and enable auto-merge so GitHub merges them once

Check warning on line 1 in .github/workflows/dependabot-auto-merge.yml

View workflow run for this annotation

GitHub Actions / dependabot-auto-merge

Workflow execution policy warning (evaluate mode) 

On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
# required status checks pass. Requires:
# - Settings → General → Pull Requests → Allow auto-merge
# - Settings → Actions → General → Allow GitHub Actions to create and approve pull requests
# - Branch protection required status checks (reviews are satisfied by this workflow)
# See: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions
#
# All Dependabot version updates (including majors) are auto-approved and auto-merged.
name: dependabot-auto-merge
on:
pull_request_target:
types: [opened, reopened, synchronize]
permissions:
contents: write
pull-requests: write
jobs:
automerge:
# Same-repo Dependabot PRs only. Key off the PR author so synchronize events from
# branch updates (non-Dependabot merge commits) still run. Never check out PR code.
if: >
github.event.pull_request.user.login == 'dependabot[bot]' &&
github.event.pull_request.head.repo.full_name == github.repository
runs-on: ubuntu-24.04
steps:
- name: Approve pull request
run: |
set -euo pipefail
if [ "$(gh pr view "$PR" --json reviewDecision -q .reviewDecision)" != "APPROVED" ]; then
gh pr review --approve "$PR"
fi
env:
PR: ${{ github.event.pull_request.html_url }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Enable auto-merge
run: |
set -euo pipefail
if [ "$(gh pr view "$PR" --json autoMergeRequest -q '.autoMergeRequest != null')" != "true" ]; then
gh pr merge --auto --squash "$PR"
fi
env:
PR: ${{ github.event.pull_request.html_url }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}