From c3bf898294dfb1406405bb14eab4b8bde23c4668 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Do=C4=9Fan=20Can=20Bak=C4=B1r?=
 <dogancanbakir@protonmail.com>
Date: Sun, 4 Oct 2026 19:11:39 +0300
Subject: [PATCH] ci: dependabot auto-merge with compatibility checks

---
 .github/dependabot.yml            | 10 ++++++++++
 .github/workflows/auto-merge.yml  | 18 ------------------
 .github/workflows/dependabot.yaml | 16 ++++++++++++++++
 3 files changed, 26 insertions(+), 18 deletions(-)
 delete mode 100644 .github/workflows/auto-merge.yml
 create mode 100644 .github/workflows/dependabot.yaml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 01fffd3..4ca7420 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,7 +4,17 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 3
+    groups:
+      minor-and-patch:
+        update-types: [minor, patch]
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 3
+    groups:
+      minor-and-patch:
+        update-types: [minor, patch]
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
deleted file mode 100644
index 545edec..0000000
--- a/.github/workflows/auto-merge.yml
+++ /dev/null
@@ -1,18 +0,0 @@
-name: Auto Merge
-
-on: pull_request
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  auto-merge:
-    name: Auto Merge
-    if: github.actor == 'dependabot[bot]'
-    runs-on: ubuntu-latest
-    steps:
-      - run: gh pr merge --squash "$PR_URL"
-        env:
-          PR_URL: ${{ github.event.pull_request.html_url }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/dependabot.yaml b/.github/workflows/dependabot.yaml
new file mode 100644
index 0000000..1d50afd
--- /dev/null
+++ b/.github/workflows/dependabot.yaml
@@ -0,0 +1,16 @@
+name: Dependabot
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  checks: read
+  contents: write
+  pull-requests: write
+  statuses: read
+
+jobs:
+  auto-merge:
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    uses: HappyHackingSpace/actions/.github/workflows/dependabot-auto-merge.yaml@v1