Skip to content

Auto-merge of dependabot PRs#125

Open
stephanme wants to merge 2 commits into
mainfrom
dependabot-pr-validation
Open

Auto-merge of dependabot PRs#125
stephanme wants to merge 2 commits into
mainfrom
dependabot-pr-validation

Conversation

@stephanme

@stephanme stephanme commented Jul 14, 2026

Copy link
Copy Markdown
Member
  • uses PR auto-merge feature (must be enabled on repo)
  • requires required status checks in branch protection (extra PR)
  • all actions configured as status checks must run unconditionally on a PR (i.e. no path restrictions)
  • fork PRs: approvers can trigger integration tests by /run-integration comment on PR AFTER reviewing the PR, the integration tests run then in the context of the approver (i.e. with secrets)

@stephanme

Copy link
Copy Markdown
Member Author

Required status checks: cloudfoundry/community#1568

- uses PR auto-merge feature (must be enabled on repo)
- requires required status checks in branch protection (extra PR)
- all actions configured as status checks must run unconditionally on a PR (i.e. no path restrictions)
@stephanme stephanme force-pushed the dependabot-pr-validation branch from f34e7c5 to 2350201 Compare July 15, 2026 07:26
@stephanme

Copy link
Copy Markdown
Member Author

For discussion: The proposed workflow auto-merges all version updates, even major version updates, if they pass the PR validation. Could be limited to non-major version updates.

So far, major version updates happened for github actions only. Usually, they are uncritical and should be merged automatically. A breaking github action version updates should be detected by PR validation very fast.

- approvers can trigger integration tests on PRs from forks AFTER reviewing the PR
- green integration tests are required for merging a PR (status checks)
@github-project-automation github-project-automation Bot moved this from Inbox to Pending Merge | Prioritized in Foundational Infrastructure Working Group Jul 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Pending Merge | Prioritized

Development

Successfully merging this pull request may close these issues.

2 participants