Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 12 additions & 9 deletions .github/workflows/docker-maintenance.yml
Original file line number Diff line number Diff line change
@@ -1,21 +1,24 @@
# =============================================================================
# Docker Maintenance — Auto-merge Dependabot PRs (src Dockerfiles)
# Docker Maintenance — Auto-merge Dependabot PRs (all ecosystems)
# =============================================================================
# When Dependabot opens a PR bumping a base image inside:
# - src/rabbitmq/Dockerfile (rabbitmq:*-management)
# - src/rabbitmq-init/Dockerfile (python:3.14-alpine)
# this workflow auto-approves and merges it (after validation passes), which
# then triggers docker-release.yml to build and push the updated image.
# No paths: filter - every Dependabot PR reaches the module and gets an
# explicit decision and annotation instead of silently staying open. It is
# merged only after docker-release.yml ran on its head commit and passed:
# - docker src/*/Dockerfile -> the PR run builds both images
# - pip src/rabbitmq-init/requirements*.txt
# -> the PR run installs them, runs
# pytest and builds rabbitmq-init
# - docker-compose: the compose files reference images only via
# ${VAR:-...}:${VAR:-latest}, which Dependabot cannot update
# - github-actions and any other .github/ change stay open (manual merge)
# Only patch updates are merged (module default for merge-update-types).
# =============================================================================

name: 🔧 Docker Maintenance

on:
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
paths:
- 'src/rabbitmq/Dockerfile'
- 'src/rabbitmq-init/Dockerfile'

permissions:
contents: write
Expand Down
Loading