From 16b0659ba628596c48e07060de52cd47054181c2 Mon Sep 17 00:00:00 2001
From: Alpheus <26622568+alpheusmtx@users.noreply.github.com>
Date: Mon, 12 Oct 2026 20:43:54 +0000
Subject: [PATCH 1/2] chore: add dependabot config for GitHub Actions

---
 .github/dependabot.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 .github/dependabot.yaml

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
new file mode 100644
index 0000000..2d112e9
--- /dev/null
+++ b/.github/dependabot.yaml
@@ -0,0 +1,14 @@
+version: 2
+updates:
+    - package-ecosystem: "github-actions"
+      directory: "/"
+      schedule:
+          interval: "daily"
+          time: "00:00"
+          timezone: "Etc/UTC"
+      cooldown:
+          default-days: 1
+          include:
+              - "*"
+      commit-message:
+          prefix: "chore"

From 0812f2feb061be004ae9f807e509a54eb3cf0425 Mon Sep 17 00:00:00 2001
From: Alpheus <26622568+alpheusmtx@users.noreply.github.com>
Date: Tue, 13 Oct 2026 06:07:26 +0800
Subject: [PATCH 2/2] ci: add dependabot merge workflow

---
 .github/workflows/dependabot-merges.yaml | 36 ++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 .github/workflows/dependabot-merges.yaml

diff --git a/.github/workflows/dependabot-merges.yaml b/.github/workflows/dependabot-merges.yaml
new file mode 100644
index 0000000..5d9200a
--- /dev/null
+++ b/.github/workflows/dependabot-merges.yaml
@@ -0,0 +1,36 @@
+name: Dependabot Merges
+
+on:
+    pull_request:
+        types:
+            - opened
+            - reopened
+            - synchronize
+
+jobs:
+    approve-and-merge:
+        name: Approve & Merge
+        if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
+
+        runs-on: ubuntu-latest
+
+        permissions:
+            contents: write
+            pull-requests: write
+
+        steps:
+            - name: Fetch Dependabot metadata
+              id: dependabot-metadata
+              uses: dependabot/fetch-metadata@v3
+              with:
+                  github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+            - name: Approve PR
+              run: gh pr review --approve "${{github.event.pull_request.html_url}}"
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+            - name: Merge PR
+              run: gh pr merge --auto --squash "${{github.event.pull_request.html_url}}"
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}