Repository navigation

Let every seam step aside when protection cannot be built #26

	name: Dependabot Auto-Merge

	on:
	pull_request_target:
	types: [opened, synchronize, reopened]

	concurrency:
	group: dependabot-auto-merge-${{ github.event.pull_request.number }}
	cancel-in-progress: true

	permissions:
	contents: write
	pull-requests: write

	jobs:
	auto-merge:
	name: 🤖 Auto-Merge Dependabot
	runs-on: ubuntu-latest
	if: github.event.pull_request.user.login == 'dependabot[bot]'
	steps:
	- name: Fetch Dependabot metadata
	id: metadata
	uses: dependabot/fetch-metadata@v3
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}

	- name: Auto-approve and merge patch/minor updates
	if: steps.metadata.outputs.update-type != 'version-update:semver-major'
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	PR_URL: ${{ github.event.pull_request.html_url }}
	run: \|
	echo "Auto-merging ${{ steps.metadata.outputs.update-type }} update"
	gh pr review "$PR_URL" --approve
	gh pr merge "$PR_URL" --auto --squash

	- name: Label major updates for review
	if: steps.metadata.outputs.update-type == 'version-update:semver-major'
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	PR_URL: ${{ github.event.pull_request.html_url }}
	run: \|
	echo "Major version update — requires manual review"
	gh pr edit "$PR_URL" --add-label "major-update"