ci: auto-approve release please PRs

[MattDevy]

Summary

• approve Release Please PRs when they are marked ready for review
• restrict approval to same-repository Release Please branches targeting main with the pending autorelease label
• use the GitHub Actions bot identity without checking out PR code

Repository setup

Enable Settings → Actions → General → Workflow permissions → Allow GitHub Actions to create and approve pull requests.

Verification

• git diff --check
• workflow YAML parsed successfully
• npm run check could not start tests in the orb because Node 20.9.0 is older than the locked Vite/Rolldown requirement of Node 20.19+

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	1		0	0	0.28s
✅ REPOSITORY	gitleaks	yes		no	no	1.21s
✅ REPOSITORY	git_diff	yes		no	no	0.03s
⚠️ YAML	prettier	1		1	2	0.43s
✅ YAML	yamllint	1		0	0	0.64s

Detailed Issues

⚠️ YAML / prettier - 1 error

Checking formatting...
[warn] .github/workflows/approve-release-please.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security