Skip to content

Add CI, Dependabot, and Dependabot auto-merge - #1

Merged
plainprogrammer merged 2 commits into
mainfrom
chore/ci-dependabot-automerge
Nov 4, 2026
Merged

plainprogrammer merged 2 commits into
mainfrom
chore/ci-dependabot-automerge

Conversation

@plainprogrammer

Copy link
Copy Markdown
Owner

Summary

  • CI (.github/workflows/ci.yml): runs bundle exec rspec on every pull request and on pushes to main, using ruby/setup-ruby with bundler caching.
  • Dependabot (.github/dependabot.yml): weekly checks for bundler and GitHub Actions dependencies, with security updates and minor/patch bumps grouped into single PRs.
  • Dependabot auto-merge (.github/workflows/dependabot-auto-merge.yml): enables auto-merge on Dependabot PRs that are non-major bumps or that fix a security advisory. They still wait for the required rspec check before merging.
  • .ruby-version: pins 3.4.2 to match the existing mise.toml so CI and local use the same Ruby.

No kata code or specs are changed.

Follow-up (repo settings, done separately)

  • Enable auto-merge and delete-branch-on-merge on the repository.
  • Add a ruleset requiring the rspec check on main, with repository admins able to bypass.

Test plan

  • bundle exec rspec passes locally on Ruby 3.4.2
  • CI rspec job is green on this PR

🤖 Generated with Claude Code

plainprogrammer and others added 2 commits November 4, 2026 16:49
- .github/workflows/ci.yml runs `bundle exec rspec` on pull requests
  and pushes to main using ruby/setup-ruby with bundler caching.
- .github/dependabot.yml checks bundler and GitHub Actions dependencies
  weekly, grouping security updates and minor/patch bumps.
- .github/workflows/dependabot-auto-merge.yml enables auto-merge on
  Dependabot PRs for non-major bumps and security fixes; they still
  wait for the required CI check.
- .ruby-version pins 3.4.2 to match mise.toml so CI and local match.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
ruby/setup-ruby only builds the latest patch of each series for the
ubuntu-latest (26.04) runner, so 3.4.2 is unavailable there. Bump both
.ruby-version and mise.toml to 3.4.12 so CI and local stay in sync.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@plainprogrammer
plainprogrammer merged commit c319fe9 into main Nov 4, 2026
2 checks passed
@plainprogrammer
plainprogrammer deleted the chore/ci-dependabot-automerge branch November 4, 2026 21:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant