From f0a88dfc441036d232b892ebe24cd851ee71ccd0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Dec 2025 02:24:54 +0000 Subject: [PATCH 1/2] chore(deps): bump pre-commit from 4.5.0 to 4.5.1 Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 4.5.0 to 4.5.1. - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](https://github.com/pre-commit/pre-commit/compare/v4.5.0...v4.5.1) --- updated-dependencies: - dependency-name: pre-commit dependency-version: 4.5.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 7b2fef4..a894a47 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,4 +4,4 @@ rich==14.2.0 # dev ruff==0.14.9 -pre-commit==4.5.0 +pre-commit==4.5.1 From 5c6888ff2801af29d91d18922e1de818b5193bc3 Mon Sep 17 00:00:00 2001 From: S4NKALP Date: Wed, 24 Dec 2025 23:04:36 +0545 Subject: [PATCH 2/2] ci(workflows): update dependabot auto-merge workflow The dependabot auto-merge workflow has been updated to use a new action and simplified logic for merging pull requests. - **Enhancements & Refinements**: - Replaced `dependabot/fetch-metadata` and `peter-evans/enable-pull-request-automerge` with `fastify/github-action-merge-dependabot` - Simplified the workflow by removing conditional logic for update types - Updated the condition syntax to use explicit expression syntax - Added explicit `github-token` configuration for the new action ``` --- .github/workflows/dependabot-auto-merge.yml | 15 ++++----------- 1 file changed, 4 insertions(+), 11 deletions(-) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 73868e1..e8f307b 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -10,18 +10,11 @@ permissions: jobs: dependabot: - if: github.actor == 'dependabot[bot]' + if: ${{github.actor == 'dependabot[bot]' }} runs-on: ubuntu-latest steps: - - name: Fetch Dependabot metadata - id: metadata - uses: dependabot/fetch-metadata@v2 - - - name: Enable auto-merge (squash) - if: | - steps.metadata.outputs.update-type == 'version-update:semver-minor' || - steps.metadata.outputs.update-type == 'version-update:semver-patch' - uses: peter-evans/enable-pull-request-automerge@v3 + - name: Merge PR from dependabot + uses: fastify/github-action-merge-dependabot@v3 with: - merge-method: squash + github-token: '${{ secrets.GITHUB_TOKEN }}'