Automates merging of Dependabot PRs for minor and patch version updates after CI passes.

Implementation

• New workflow: .github/workflows/dependabot-auto-merge.yml
• Triggers on PRs to develop and master branches from dependabot[bot]
• Uses dependabot/fetch-metadata@v2.2.0 to determine update type
• Enables auto-merge for semver-minor and semver-patch updates only
• Squash merge strategy to maintain clean history

Workflow Logic

- if: |
    steps.metadata.outputs.update-type == 'version-update:semver-minor' ||
    steps.metadata.outputs.update-type == 'version-update:semver-patch'
  run: gh pr merge --auto --squash "$PR_URL"

Major version updates remain manual to prevent breaking changes. GitHub's auto-merge waits for required status checks before merging.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.