From c47916f6b636ac01c708439e9e26d97c5abc1780 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 17 Feb 2026 13:21:49 +0000
Subject: [PATCH 1/2] Initial plan


From 9b5b6a2953119273ae876cefb76e5d7721e73617 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 17 Feb 2026 13:23:32 +0000
Subject: [PATCH 2/2] chore: standardize dependabot configuration

Co-authored-by: gygrobot <19344429+gygrobot@users.noreply.github.com>
---
 .github/dependabot.yml                     | 18 ++++++++++++++++++
 .github/workflows/dependabot-approve.yml   | 20 ++++++++++++++++++++
 .github/workflows/dependabot-automerge.yml | 22 ++++++++++++++++++++++
 3 files changed, 60 insertions(+)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/dependabot-approve.yml
 create mode 100644 .github/workflows/dependabot-automerge.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..4f96af5
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,18 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    open-pull-requests-limit: 5
+    schedule:
+      interval: daily
+      time: "08:30"
+      timezone: Europe/Berlin
+    groups:
+      patch-and-minor:
+        update-types:
+          - patch
+          - minor
+    cooldown:
+      default-days: 7
+      exclude:
+        - getyourguide/*
diff --git a/.github/workflows/dependabot-approve.yml b/.github/workflows/dependabot-approve.yml
new file mode 100644
index 0000000..e73f6e9
--- /dev/null
+++ b/.github/workflows/dependabot-approve.yml
@@ -0,0 +1,20 @@
+name: Dependabot Approve
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+concurrency:
+  group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }}
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  auto-approve:
+    name: Approve PR
+    uses: getyourguide/actions/.github/workflows/dependabot-approve.yml@main
+    with:
+      pr-url: ${{ github.event.pull_request.html_url }}
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
new file mode 100644
index 0000000..cd3c454
--- /dev/null
+++ b/.github/workflows/dependabot-automerge.yml
@@ -0,0 +1,22 @@
+name: Dependabot Auto Merge
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 9 * * 1-5"
+
+concurrency:
+  group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }}
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
+permissions:
+  pull-requests: write
+  id-token: write
+
+jobs:
+  auto-merge:
+    name: Auto merge
+    uses: getyourguide/actions/.github/workflows/dependabot-merge.yml@main
+    secrets: inherit
+    with:
+      slack_ping_support: true