From fbdc6cc08c6651856fbd854367410a730ed2256a Mon Sep 17 00:00:00 2001 From: Mike Odnis Date: Sun, 31 May 2026 14:38:39 -0400 Subject: [PATCH] fix(ci): repair Dependabot auto-merge workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The auto-merge workflow never landed any Dependabot PR for two reasons: 1. The 'Rebase onto master' step posted '@dependabot rebase' via GITHUB_TOKEN, which Dependabot rejects with 'only users with push access can use that command'. Removed the step entirely — it is unnecessary because 'gh pr merge --auto' queues the merge and Dependabot rebases its own PRs automatically. 2. 'gh pr merge --auto' failed with 'Auto merge is not allowed for this repository' because the repo-level 'Allow auto-merge' setting was disabled. That setting has now been enabled (repo settings change). Together these caused every minor/patch Dependabot PR to stall in a BLOCKED state, exhausting the open-PR limits in dependabot.yml. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/auto-merge.yml | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml index 26db08c..a9791a4 100644 --- a/.github/workflows/auto-merge.yml +++ b/.github/workflows/auto-merge.yml @@ -38,15 +38,10 @@ jobs: with: github-token: ${{ secrets.GITHUB_TOKEN }} - - name: Rebase onto master - if: > - steps.metadata.outputs.update-type == 'version-update:semver-minor' || - steps.metadata.outputs.update-type == 'version-update:semver-patch' - run: gh pr comment "$PR_URL" --body "@dependabot rebase" - env: - PR_URL: ${{ github.event.pull_request.html_url }} - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - + # NOTE: no "@dependabot rebase" comment step here. Posting that comment via + # GITHUB_TOKEN is rejected ("only users with push access can use that + # command"), and it is unnecessary: `gh pr merge --auto` queues the merge + # and Dependabot rebases its own PRs automatically when they fall behind. - name: Auto-merge minor and patch updates if: > steps.metadata.outputs.update-type == 'version-update:semver-minor' ||