From febda693d71a1c7b93dbc084548c96829d1f9c9c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Mar 2026 09:26:19 +0000 Subject: [PATCH 1/2] Bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 2.5.0 to 3.0.0. - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/v2.5.0...v3.0.0) --- updated-dependencies: - dependency-name: dependabot/fetch-metadata dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/merge-dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/merge-dependabot.yml b/.github/workflows/merge-dependabot.yml index 375b68c..65de79b 100644 --- a/.github/workflows/merge-dependabot.yml +++ b/.github/workflows/merge-dependabot.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Dependabot metadata id: metadata - uses: dependabot/fetch-metadata@v2.5.0 + uses: dependabot/fetch-metadata@v3.0.0 continue-on-error: true # Handle 'PR is not from Dependabot, nothing to do' error quietly with: github-token: "${{ secrets.GITHUB_TOKEN }}" From 42efe17f71b9ef4d5d2122054d95890d6cd9894c Mon Sep 17 00:00:00 2001 From: David Gardiner Date: Mon, 30 Mar 2026 19:57:18 +1030 Subject: [PATCH 2/2] Update automerge --- .github/workflows/merge-dependabot.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/merge-dependabot.yml b/.github/workflows/merge-dependabot.yml index 65de79b..2071373 100644 --- a/.github/workflows/merge-dependabot.yml +++ b/.github/workflows/merge-dependabot.yml @@ -29,7 +29,8 @@ jobs: contains(steps.metadata.outputs.dependency-names, 'xresloader/upload-to-github-release') || contains(steps.metadata.outputs.dependency-names, 'i3h/download-release-asset') || contains(steps.metadata.outputs.dependency-names, 'github/codeql-action') || - contains(steps.metadata.outputs.dependency-names, 'microsoft/setup-msbuild') + contains(steps.metadata.outputs.dependency-names, 'microsoft/setup-msbuild') || + contains(steps.metadata.outputs.dependency-names, 'dependabot/fetch-metadata') }} run: gh pr merge --auto --merge "$PR_URL" env: