From ab6614502c34d0fbee5c79d8898fde88e1898ed6 Mon Sep 17 00:00:00 2001 From: loks0n <22452787+loks0n@users.noreply.github.com> Date: Wed, 28 Oct 2026 13:14:27 +0000 Subject: [PATCH 1/2] ci: use the shared Dependabot auto-merge gate Co-Authored-By: Claude Opus 5.5 --- .github/workflows/dependabot-auto-merge.yml | 30 +++++++++------------ 1 file changed, 13 insertions(+), 17 deletions(-) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index c0110e8b..7b3c4e32 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -1,25 +1,21 @@ name: Dependabot auto-merge -on: pull_request +# Approves and merges Dependabot patch and minor updates once every check has passed. +# Runs after each workflow a pull request triggers; the shared gate waits for all of them. +on: + workflow_run: + workflows: + - 'Dependency audit' + - 'Template builds' + types: + - completed permissions: + checks: read contents: write pull-requests: write + statuses: read jobs: - auto-merge: - if: github.event.pull_request.user.login == 'dependabot[bot]' - runs-on: ubuntu-latest - steps: - - name: Fetch Dependabot metadata - id: metadata - uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0 - with: - github-token: ${{ secrets.GITHUB_TOKEN }} - - - name: Enable auto-merge for patch and minor updates - if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' - run: gh pr merge --auto --squash "$PR_URL" - env: - PR_URL: ${{ github.event.pull_request.html_url }} - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + dependabot: + uses: appwrite/.github/.github/workflows/dependabot-auto-merge.yml@d559a62c510dc7eccf274dda83b0a42f89b0bc06 # main From aa058f7bd5daaae52c7174ea90505852879ad765 Mon Sep 17 00:00:00 2001 From: loks0n <22452787+loks0n@users.noreply.github.com> Date: Wed, 28 Oct 2026 13:21:51 +0000 Subject: [PATCH 2/2] ci: grant the Dependabot gate actions: read The shared gate lists the commit's workflow runs, which needs it. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/dependabot-auto-merge.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 7b3c4e32..e20c54bf 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -11,6 +11,7 @@ on: - completed permissions: + actions: read checks: read contents: write pull-requests: write