feat(workflow-templates): add dependabot-auto-merge caller stub + properties - #11
Merged
Merged
Conversation
…perties Replaces the self-contained dependabot-auto-merge.yml body with a caller stub pointing at the new reusable workflow in smartwatermelon/github-workflows (Part A2 of the reusable-workflows plan; see smartwatermelon/github-workflows#96). Adds the missing dependabot-auto-merge.properties.json so the workflow-templates picker actually offers this template — it was confirmed silently absent from the picker during planning validation. Temporarily pinned to a commit SHA rather than the dependabot-auto-merge-v1 tag, since that tag doesn't exist until github-workflows#96 merges and the tag is cut (~1 minute after merge, per this fleet's established convention). Follow-up PR needed once the tag exists. Claude-Session: https://claude.ai/code/session_0143Nf4sXqnTp2Kx3LNbMvBA
6 tasks
added 3 commits
August 7, 2026 16:13
…to cut tag The reusable workflow's dependabot-auto-merge-v1.0.0 tag (and floating dependabot-auto-merge-v1) are now cut in smartwatermelon/github-workflows following #96's merge. Replace the temporary branch-tip SHA pin with the real tag.
The reusable workflow's dependabot-auto-merge-v1.0.0 tag (and floating dependabot-auto-merge-v1) are now cut in smartwatermelon/github-workflows following #96's merge. Replace the temporary branch-tip SHA pin with the real floating tag, and document explicitly that floating (versus a stricter pin) is an accepted tradeoff for this template, not an oversight -- matching the precedent already set by claude-blocking-review.yml@v3.
…usable Address two non-blocking review findings on the prior commit: the actor gate (dependabot[bot] only) and merge-scope defaults are entirely inside the reusable workflow now, invisible from this caller stub since it passes no with: inputs. Point auditors at the reusable workflow file directly.
twistedmelonman
pushed a commit
to nightowlstudiollc/.github
that referenced
this pull request
Aug 7, 2026
Mirrors smartwatermelon/.github#11: the reusable workflow's dependabot-auto-merge-v1.0.0 tag (and floating dependabot-auto-merge-v1) are now cut in smartwatermelon/github-workflows following #96's merge. Replace the temporary branch-tip SHA pin with the real floating tag, and document explicitly that floating (versus a stricter pin) is an accepted tradeoff for this template, plus note that the actor gate and merge-scope defaults now live entirely inside the reusable workflow, invisible from this caller stub.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Part of Part A2/A4 of the reusable-workflows plan. Replaces this template's self-contained
dependabot-auto-merge.ymlbody with a caller stub pointing at the new reusable workflow being added in smartwatermelon/github-workflows#96. Adds the missingdependabot-auto-merge.properties.jsonso the workflow-templates picker actually offers this template — confirmed silently absent from the picker during planning validation (the picker correctly does not currently show "Dependabot Auto-Merge" as an option).Actor guard — confirmed preserved
The reusable workflow (
smartwatermelon/github-workflowscommitad3f0ec, PR #96) keeps the sameif: github.actor == 'dependabot[bot]'guard at the job level — it moved from this caller's job into the reusable'sauto-mergejob, it was not dropped. See dependabot-auto-merge.yml in that PR.Blocking on tag creation
Temporarily pinned to the
github-workflowscommit SHAad3f0ec080ad5b119f2359bf42de6623c4730544rather than a tag, sincedependabot-auto-merge-v1doesn't exist until that repo's PR #96 merges (tags are cut ~1 minute after merge, per that fleet's established convention). Follow-up PR needed here once the tag exists to repoint@ad3f0ec080...->@dependabot-auto-merge-v1.Test plan
yamllintclean (one pre-existing-style line-length warning)@dependabot-auto-merge-v1once that tag is cut ingithub-workflowsClaude-Session: https://claude.ai/code/session_0143Nf4sXqnTp2Kx3LNbMvBA