Add Dependabot Auto-merge workflow

[leynos]

Summary

• Adds Dependabot Auto-merge workflow by delegating to a centralized reusable workflow

Changes

Workflow

• dependabot-automerge.yml: New workflow file that calls a centralized reusable workflow
  • Trigger: on pull_request types opened, reopened, synchronize, ready_for_review, and workflow_dispatch
  • Reuses: leynos/shared-actions@235d2d0
  • Permissions: contents and pull-requests write
  • Secrets: inherit

Files Added

• .github/workflows/dependabot-automerge.yml

Test plan

• Validate workflow triggers by creating or refreshing a Dependabot PR
• Verify auto-merge occurs when checks pass
• Confirm manual trigger via workflow_dispatch works

🌿 Generated by Terry

---

ℹ️ Tag @terragon-labs to ask questions and address PR feedback

📎 Task: https://www.terragonlabs.com/task/f90e4372-29c0-450f-a3be-d3b5062fa851

Summary by Sourcery

CI:

• Introduce a Dependabot auto-merge workflow that triggers on Dependabot pull request events and manual dispatch, delegating to a centralized reusable workflow.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch terragon/add-dependabot-automerge-a3s7zq

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Adds a new GitHub Actions workflow that delegates Dependabot pull request auto-merge behavior to a centralized reusable workflow, configuring appropriate triggers and permissions.

Sequence diagram for Dependabot PR auto-merge via reusable workflow

sequenceDiagram
  actor DependabotBot
  actor Developer
  participant GitHubAPI
  participant RepoWorkflow as RepoWorkflow_dependabot_automerge
  participant SharedWorkflow as SharedWorkflow_dependabot_automerge

  DependabotBot->>GitHubAPI: Create_or_update_PR
  GitHubAPI-->>DependabotBot: PR_created_or_updated

  GitHubAPI->>RepoWorkflow: Trigger_pull_request_event
  Note over RepoWorkflow: Event types: opened, reopened,
  Note over RepoWorkflow: synchronize, ready_for_review

  RepoWorkflow->>SharedWorkflow: Invoke_reusable_workflow
  SharedWorkflow->>GitHubAPI: Check_PR_source_and_status
  GitHubAPI-->>SharedWorkflow: PR_is_Dependabot_and_checks_passed
  SharedWorkflow->>GitHubAPI: Merge_PR

  Developer->>GitHubAPI: Trigger_workflow_dispatch
  GitHubAPI->>RepoWorkflow: Start_manual_run
  RepoWorkflow->>SharedWorkflow: Invoke_reusable_workflow_manual
  SharedWorkflow->>GitHubAPI: Evaluate_and_merge_eligible_PRs

Loading

File-Level Changes

Change	Details	Files
Introduce a Dependabot auto-merge GitHub Actions workflow that reuses a centralized workflow definition.	Add a new workflow triggered on Dependabot-related pull_request events (opened, reopened, synchronize, ready_for_review) and manual workflow_dispatch Configure workflow permissions to allow writing to contents and pull-requests so merges can be performed Define a single job that calls the shared dependabot-automerge reusable workflow at a fixed commit, inheriting repository secrets	.github/workflows/dependabot-automerge.yml

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.