From 5f7c22ea62b13c2ea383f0b1c8cc634130ced395 Mon Sep 17 00:00:00 2001 From: Karl Bauer Date: Fri, 9 Oct 2026 17:43:48 +0200 Subject: [PATCH] ci(dependabot): required the real CI before auto-merging automation-templates#115 merges a Dependabot PR only after green CI. Until now any passed check counted as green, so a PR whose build never ran could be merged on GitGuardian or a notification job alone. #115 adds the input required-workflows: every listed workflow must have a pull_request run on the PR head commit whose latest attempt succeeded, and without the input nothing is merged. This names docker-release.yml: on every PR that changes a file this caller starts for, it tests rabbitmq-init and builds the images. Merge only after automation-templates#115: until then the called workflow on main does not declare the input and GitHub rejects the call. Refs bauer-group/automation-templates#115 --- .github/workflows/docker-maintenance.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/docker-maintenance.yml b/.github/workflows/docker-maintenance.yml index 8cee51d..61dd1d4 100644 --- a/.github/workflows/docker-maintenance.yml +++ b/.github/workflows/docker-maintenance.yml @@ -28,4 +28,7 @@ jobs: with: merge-method: 'squash' auto-approve: true + # Merge only after this PR CI has passed on the PR head commit - it + # tests rabbitmq-init and builds the images. + required-workflows: '.github/workflows/docker-release.yml' secrets: inherit