ci: dependabot automerge

.github/CODEOWNERS

@@ -0,0 +1,9 @@
+# This is a comment.
+
+# Each line is a file pattern followed by one or more owners.
+# These owners will be the default owners for everything in
+# the repo. Unless a later match takes precedence,
+# @global-owner1 and @global-owner2 will be requested for
+# review when someone opens a pull request.
+# *       @global-owner1 @global-owner2
+*       @yxtay

.github/dependabot.yml

@@ -1,31 +1,32 @@
 version: 2
+
 updates:
   - package-ecosystem: docker
     directory: /
     schedule:
-      interval: weekly
+      interval: daily
     commit-message:
       prefix: build(docker)
     groups:
       docker:
-        patterns: ["*"]
+        update-types: [minor, patch]
 
   - package-ecosystem: github-actions
     directory: /
     schedule:
-      interval: weekly
+      interval: daily
     commit-message:
       prefix: ci(github-actions)
     groups:
       github-actions:
-        patterns: ["*"]
+        update-types: [minor, patch]
 
   - package-ecosystem: pip
     directory: /
     schedule:
-      interval: weekly
+      interval: daily
     commit-message:
       prefix: build(pip)
     groups:
       pip:
-        patterns: ["*"]
+        update-types: [minor, patch]

.github/workflows/pr.yml

@@ -2,16 +2,14 @@ name: pr
 
 on:
   pull_request:
-    # pull_request_target:  # for forked PR
     types:
       - opened
       - edited
       - reopened
       - synchronize
 
 jobs:
-  title-linter:
-    name: lint title
+  lint-title:
     permissions:
       pull-requests: read
     runs-on: ubuntu-latest
@@ -21,8 +19,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-  labeler:
-    name: label
+  label:
     permissions:
       contents: read
       pull-requests: write
@@ -31,8 +28,7 @@ jobs:
       - name: labeler
         uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5
 
-  size-labeler:
-    name: label size
+  label-size:
     permissions:
       contents: read
       pull-requests: write
@@ -46,3 +42,25 @@ jobs:
             package-lock.json
             *.lock
             docs/**
+
+  dependabot:
+    if: github.actor == 'dependabot[bot]'
+    permissions:
+      contents: write
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+      - id: metadata
+        uses: dependabot/fetch-metadata@v2
+
+      - name: log metadata
+        env:
+          DEPENDABOT_METADATA: ${{ toJson(steps.metadata.outputs) }}
+        run: echo ${DEPENDABOT_METADATA}
+
+      - name: automerge
+        if: ${{ !contains(steps.metadata.outputs.update-type, 'major' ) }}
+        run: gh pr merge --auto --squash ${PR_NUMBER}
+        env:
+          PR_NUMBER: ${{ github.event.pull_request.number || github.event.issue.number }}
+          GH_TOKEN: ${{ github.token }}

.pre-commit-config.yaml

@@ -81,7 +81,7 @@ repos:
       - id: markdownlint
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.9.5
+    rev: v0.9.6
     hooks:
       - id: ruff
         types_or: [python, pyi, jupyter]
@@ -95,11 +95,11 @@ repos:
       - id: taplo-format
 
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.5.29
+    rev: 0.5.30
     hooks:
       - id: uv-lock
 
   - repo: https://github.com/google/yamlfmt
-    rev: v0.15.0
+    rev: v0.16.0
     hooks:
       - id: yamlfmt

pyproject.toml

@@ -1,5 +1,5 @@
 [build-system]
-requires = ["poetry-core"]
+requires = ["poetry-core>=2.0,<3.0"]
 build-backend = "poetry.core.masonry.api"
 
 [project]

renovate.json

@@ -5,10 +5,6 @@
     {
       "automerge": true,
       "matchUpdateTypes": ["minor", "patch", "pin", "digest"]
-    },
-    {
-      "automerge": true,
-      "matchDepTypes": ["devDependencies"]
     }
   ]
 }