From c6a1378649b297b0e13cc6055be8a2fd87d1aea6 Mon Sep 17 00:00:00 2001 From: Naseem AlNaji Date: Mon, 10 Aug 2026 15:46:09 -0400 Subject: [PATCH] chore: Dependabot security updates only, remove auto-merge Disables scheduled version updates (open-pull-requests-limit: 0); security updates are exempt from that limit and keep flowing. Removes the auto-merge caller workflow: every Dependabot PR now requires human review and a manual merge, with no PR approved or merged by automation. --- .github/dependabot.yml | 17 ++--------------- .github/workflows/dependabot-auto-merge.yml | 12 ------------ 2 files changed, 2 insertions(+), 27 deletions(-) delete mode 100644 .github/workflows/dependabot-auto-merge.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index eb0f212..0e633c1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,15 +4,8 @@ updates: directory: "/" schedule: interval: "weekly" - day: "monday" - cooldown: - default-days: 7 - semver-major-days: 30 + open-pull-requests-limit: 0 groups: - pip-minor-patch: - applies-to: version-updates - patterns: ["*"] - update-types: ["minor", "patch"] pip-security: applies-to: security-updates patterns: ["*"] @@ -20,14 +13,8 @@ updates: directory: "/" schedule: interval: "weekly" - day: "monday" - cooldown: - default-days: 7 + open-pull-requests-limit: 0 groups: - github-actions-minor-patch: - applies-to: version-updates - patterns: ["*"] - update-types: ["minor", "patch"] github-actions-security: applies-to: security-updates patterns: ["*"] diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml deleted file mode 100644 index 2717b28..0000000 --- a/.github/workflows/dependabot-auto-merge.yml +++ /dev/null @@ -1,12 +0,0 @@ -name: Dependabot auto-merge - -on: pull_request - -permissions: - contents: write - pull-requests: write - -jobs: - auto-merge: - if: github.event.pull_request.user.login == 'dependabot[bot]' - uses: agentcathq/.github/.github/workflows/dependabot-auto-merge.yml@main