From 92154de28c0fa9f47d97b8690507d8d1c344528a Mon Sep 17 00:00:00 2001
From: nsemiankou-web <nsemiankou@theatlantic.com>
Date: Tue, 5 May 2026 12:54:08 -0400
Subject: [PATCH] chore: add Dependabot configuration for auto-merging and
 updates

---
 .github/dependabot.yml                        | 17 ++++++++++++
 .../dependabot-auto-merge-caller.yaml         | 27 +++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/dependabot-auto-merge-caller.yaml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..a8b5aff
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore(ci)"
+  
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore"
diff --git a/.github/workflows/dependabot-auto-merge-caller.yaml b/.github/workflows/dependabot-auto-merge-caller.yaml
new file mode 100644
index 0000000..ce77729
--- /dev/null
+++ b/.github/workflows/dependabot-auto-merge-caller.yaml
@@ -0,0 +1,27 @@
+name: Auto-merge Dependabot
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  schedule:
+    - cron: '0 9 * * *'
+  workflow_dispatch:
+
+jobs:
+  dependabot-automerge-github-actions:
+    if: github.event_name != 'pull_request' || github.event.pull_request.user.login == 'dependabot[bot]'
+
+    permissions:
+      pull-requests: write
+      contents: write
+      issues: write
+    uses: theatlantic/workflows/.github/workflows/dependabot-automerge.yml@main
+    secrets:
+      AUTOMERGE_TOKEN: ${{ secrets.DEPENDABOT_AUTOMERGE_TOKEN }}
+    with:
+      allowed-ecosystems: 'github_actions'
+      allowed-update-types: 'minor,patch,major'
+      merge-method: 'squash'
+      days-to-wait: 10
+      security-fast-track: true
+      approve-only: false