From 87de4cee2b160def6ea16bdc2dd4f4d2df905221 Mon Sep 17 00:00:00 2001 From: Simon Whatley Date: Mon, 27 Apr 2026 09:11:58 +0100 Subject: [PATCH 1/2] Add cooldown to dependabot config --- .github/dependabot.yml | 24 ++++++++++++++++++------ 1 file changed, 18 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 36b61c4..a88c2dd 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,10 +1,22 @@ version: 2 updates: - - package-ecosystem: 'github-actions' - directory: '/' + - package-ecosystem: "github-actions" + directory: "/" schedule: - interval: 'daily' - - package-ecosystem: 'npm' - directory: '/' + interval: "daily" + open-pull-requests-limit: 10 + cooldown: + default-days: 7 + semver-major-days: 30 + semver-minor-days: 14 + semver-patch-days: 3 + - package-ecosystem: "npm" + directory: "/" schedule: - interval: 'daily' + interval: "daily" + open-pull-requests-limit: 10 + cooldown: + default-days: 7 + semver-major-days: 30 + semver-minor-days: 14 + semver-patch-days: 3 From a9ec545926db036d0c9858509413d9f9e105c4d0 Mon Sep 17 00:00:00 2001 From: Simon Whatley Date: Mon, 27 Apr 2026 09:12:10 +0100 Subject: [PATCH 2/2] Add auto-merge workflow --- .github/workflows/auto-merge.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 .github/workflows/auto-merge.yml diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml new file mode 100644 index 0000000..26eb6df --- /dev/null +++ b/.github/workflows/auto-merge.yml @@ -0,0 +1,19 @@ +name: Auto-merge + +on: [pull_request] + +jobs: + auto-merge: + runs-on: ubuntu-latest + + permissions: + pull-requests: write + contents: write + + steps: + - name: Squash and merge minor updates + uses: fastify/github-action-merge-dependabot@v3 + with: + github-token: ${{ secrets.GITHUB_TOKEN }} + merge-method: squash + target: minor