Skip to content

Comments

refactor: use GitHub's native Dependabot features, remove custom work…#21

Merged
ldsenow merged 1 commit intomainfrom
claude/deep-code-a-011CUSwhiYGr67hkyDZnFsLP
Oct 25, 2025
Merged

refactor: use GitHub's native Dependabot features, remove custom work…#21
ldsenow merged 1 commit intomainfrom
claude/deep-code-a-011CUSwhiYGr67hkyDZnFsLP

Conversation

@ldsenow
Copy link
Contributor

@ldsenow ldsenow commented Oct 25, 2025

…flow

Changes

1. Deleted Custom Workflow

Removed: .github/workflows/dependabot-automerge.yml (33 lines)

Why: GitHub now has native auto-merge features built-in. No need for custom workflow.

2. Enhanced Dependabot Configuration

Updated: .github/dependabot.yml

Added grouping for auto-merge:

groups:
  minor-and-patch:
    patterns: ["*"]
    update-types: ["minor", "patch"]

What this does:

  • Groups minor and patch updates together
  • Creates fewer, more manageable PRs
  • Ready for GitHub's native auto-merge
  • Major updates still require manual review

3. Updated Documentation

  • Removed references to custom auto-merge workflow
  • Added setup instructions for GitHub's native auto-merge
  • Updated workflow count: 4 → 3 workflows

Before vs After

Before:

  • 4 workflow files (689 lines)
  • Custom auto-merge workflow (33 lines)
  • dependabot.yml configuration (29 lines)

After:

  • 3 workflow files (656 lines)
  • Enhanced dependabot.yml with grouping (46 lines)
  • Uses GitHub's native features

Code reduction: -33 lines of workflow code

How It Works Now

  1. Dependabot scans dependencies weekly (Monday 9 AM)
  2. Finds updates and groups minor/patch together
  3. Creates grouped PRs (e.g., "Bump NuGet dependencies (minor/patch)")
  4. You enable auto-merge on GitHub's PR interface
  5. When CI passes, GitHub auto-merges
  6. Major updates still require manual review

Setup Required (One-time)

Enable auto-merge in repository settings:

Settings → General → Pull Requests
✅ Enable "Allow auto-merge"

Then on each Dependabot PR:

  • Click "Enable auto-merge" button
  • Select "Merge" method
  • Done! It'll merge when CI passes

Benefits

Simpler: One less workflow to maintain
Native: Uses GitHub's built-in features
Maintained: GitHub keeps it updated
Same result: Minor/patch auto-merge, major needs review ✅ Grouped PRs: Fewer PRs to handle (grouped by update type)

Philosophy

Use platform features when available:

  • Don't reinvent what GitHub already provides
  • Custom workflows only when necessary
  • Simpler is better

Migration Notes

No breaking changes. The behavior is the same:

  • Minor/patch updates can be auto-merged
  • Major updates require manual review
  • Just using GitHub's native button instead of custom workflow

🤖 Generated with Claude Code (https://claude.com/claude-code)

…flow

## Changes

### 1. Deleted Custom Workflow
Removed: `.github/workflows/dependabot-automerge.yml` (33 lines)

**Why:** GitHub now has native auto-merge features built-in. No need for custom workflow.

### 2. Enhanced Dependabot Configuration
Updated: `.github/dependabot.yml`

**Added grouping for auto-merge:**
```yaml
groups:
  minor-and-patch:
    patterns: ["*"]
    update-types: ["minor", "patch"]
```

**What this does:**
- Groups minor and patch updates together
- Creates fewer, more manageable PRs
- Ready for GitHub's native auto-merge
- Major updates still require manual review

### 3. Updated Documentation
- Removed references to custom auto-merge workflow
- Added setup instructions for GitHub's native auto-merge
- Updated workflow count: 4 → 3 workflows

## Before vs After

**Before:**
- 4 workflow files (689 lines)
- Custom auto-merge workflow (33 lines)
- dependabot.yml configuration (29 lines)

**After:**
- 3 workflow files (656 lines)
- Enhanced dependabot.yml with grouping (46 lines)
- Uses GitHub's native features

**Code reduction:** -33 lines of workflow code

## How It Works Now

1. **Dependabot** scans dependencies weekly (Monday 9 AM)
2. Finds updates and **groups** minor/patch together
3. Creates grouped PRs (e.g., "Bump NuGet dependencies (minor/patch)")
4. You enable **auto-merge** on GitHub's PR interface
5. When CI passes, GitHub auto-merges
6. Major updates still require manual review

## Setup Required (One-time)

**Enable auto-merge in repository settings:**
```
Settings → General → Pull Requests
✅ Enable "Allow auto-merge"
```

**Then on each Dependabot PR:**
- Click "Enable auto-merge" button
- Select "Merge" method
- Done! It'll merge when CI passes

## Benefits

✅ **Simpler:** One less workflow to maintain
✅ **Native:** Uses GitHub's built-in features
✅ **Maintained:** GitHub keeps it updated
✅ **Same result:** Minor/patch auto-merge, major needs review
✅ **Grouped PRs:** Fewer PRs to handle (grouped by update type)

## Philosophy

**Use platform features when available:**
- Don't reinvent what GitHub already provides
- Custom workflows only when necessary
- Simpler is better

## Migration Notes

No breaking changes. The behavior is the same:
- Minor/patch updates can be auto-merged
- Major updates require manual review
- Just using GitHub's native button instead of custom workflow

🤖 Generated with Claude Code (https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
@ldsenow ldsenow merged commit 8f1467d into main Oct 25, 2025
36 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants