From 39b7704056d2d9bdc73572e80237401e4786bcaa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Dec 2025 02:28:15 +0000 Subject: [PATCH 1/3] chore(deps): bump ruff from 0.14.8 to 0.14.9 Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.8 to 0.14.9. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.14.8...0.14.9) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.14.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index ad817fc..7b2fef4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3,5 +3,5 @@ questionary==2.1.1 rich==14.2.0 # dev -ruff==0.14.8 +ruff==0.14.9 pre-commit==4.5.0 -- 2.43.0 From d8402927e13852bfcd6de6d3ce601ae234bd2c9e Mon Sep 17 00:00:00 2001 From: S4NKALP Date: Wed, 17 Dec 2025 10:11:25 +0545 Subject: [PATCH 2/3] feat(.github/workflows): streamline dependabot auto-merge workflow The Dependabot auto-merge workflow has been simplified and focused on essential functionality. Approval steps have been removed, leaving only the core auto-merge capability for minor and patch updates. **New Features** - Added explicit conditional filtering to run jobs **only for Dependabot PRs** **Enhancements & Refinements** - Renamed workflow from **Dependabot Auto-Approve and Auto-Merge** to **Dependabot Auto-Merge** to reflect simplified scope - Improved workflow structure with clearer YAML syntax separation - Reorganized **Fetch Dependabot metadata** step placement for better readability - Removed redundant GitHub script approval step to reduce complexity --- .github/workflows/dependabot-auto-merge.yml | 24 +++++++-------------- 1 file changed, 8 insertions(+), 16 deletions(-) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 7c0bdb0..540c878 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -1,5 +1,7 @@ -name: Dependabot Auto-Approve and Auto-Merge -on: pull_request +name: Dependabot Auto-Merge + +on: + pull_request: permissions: contents: write @@ -7,25 +9,15 @@ permissions: jobs: dependabot: + # Run only for Dependabot PRs if: github.actor == 'dependabot[bot]' runs-on: ubuntu-latest + steps: - - name: Dependabot metadata + - name: Fetch Dependabot metadata id: metadata uses: dependabot/fetch-metadata@v2 - - name: Approve PR - if: | - steps.metadata.outputs.update-type == 'version-update:semver-minor' || - steps.metadata.outputs.update-type == 'version-update:semver-patch' - uses: actions/github-script@v8 - with: - script: | - await github.rest.pulls.createReview({ - owner: context.repo.owner, - repo: context.repo.repo, - pull_number: context.payload.pull_request.number, - event: 'APPROVE' - }) + - name: Enable auto-merge (squash) if: | steps.metadata.outputs.update-type == 'version-update:semver-minor' || -- 2.43.0 From 8d38a5e9dffec532f87f7d7c80d5741fe22049af Mon Sep 17 00:00:00 2001 From: S4NKALP Date: Wed, 17 Dec 2025 10:18:24 +0545 Subject: [PATCH 3/3] feat(.github/workflows): improve Dependabot auto-merge workflow - **New Features** - Add Dependabot Auto-Merge workflow to automatically merge Dependabot PRs. - **Enhancements & Refinements** - Remove redundant comment clarifying the workflow's Dependabot-specific execution. - Adjust whitespace for better YAML formatting. --- .github/workflows/dependabot-auto-merge.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 540c878..73868e1 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -1,3 +1,4 @@ + name: Dependabot Auto-Merge on: @@ -9,7 +10,6 @@ permissions: jobs: dependabot: - # Run only for Dependabot PRs if: github.actor == 'dependabot[bot]' runs-on: ubuntu-latest -- 2.43.0