Skip to content

chore: delegate dependabot-auto-merge.yml to org reusable template - #4

Merged
kayodebristol merged 2 commits into
mainfrom
chore/dependabot-auto-merge-workflow-call
Jul 29, 2026
Merged

chore: delegate dependabot-auto-merge.yml to org reusable template#4
kayodebristol merged 2 commits into
mainfrom
chore/dependabot-auto-merge-workflow-call

Conversation

@kayodebristol

Copy link
Copy Markdown

Replaces the byte-identical local copy of dependabot-auto-merge.yml with a thin
caller into plures/.github's reusable template (workflow_call).

No behavior change: same triggers, same permissions, policy logic now lives in
one place instead of ~59 duplicated copies.

Depends on plures/.github#21 (adds the workflow_call trigger to the shared
template) - do not merge this before openclaw#21 lands.

Part of github-actions:ci-lockin-reduction epic.

Copilot AI review requested due to automatic review settings July 25, 2026 11:25

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Delegates this repo’s Dependabot auto-merge workflow to the org-level reusable workflow in plures/.github, aiming to eliminate duplicated policy logic across many repositories.

Changes:

  • Replaces the in-repo Dependabot auto-merge job implementation with a reusable workflow call.
  • Keeps the same pull_request_target trigger types and token permissions in the caller workflow.
  • Adds a short header comment directing future policy edits to the shared org template.

Comment on lines +18 to +19
uses: plures/.github/.github/workflows/dependabot-auto-merge.yml@main
secrets: inherit

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Restored the full local workflow body from the v4 policy commit. The org template's zerox.outputs.breaking != 'true' guard contradicts openclaw's "merge whenever possible" directive, so delegation to it was the wrong approach here. The local workflow now again auto-merges 0.x-breaking non-security bumps (CI-gated via --auto), with only non-security direct:production semver-major bumps held for human review.

Fix: fix: restore local dependabot-auto-merge workflow; org template blocks 0.x-breaking auto-merge unlike v4 policy

@kayodebristol
kayodebristol merged commit 9aead85 into main Jul 29, 2026
@kayodebristol
kayodebristol deleted the chore/dependabot-auto-merge-workflow-call branch July 29, 2026 08:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants