From 7d5052059a2947f9655c8e2841b366104c95ea82 Mon Sep 17 00:00:00 2001
From: gsd-sync <gsd-sync@users.noreply.github.com>
Date: Mon, 29 Jun 2026 20:09:18 +0200
Subject: [PATCH] chore: adopt gsd agent automation

---
 .github/workflows/dependabot-auto-merge.yml | 28 +++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 .github/workflows/dependabot-auto-merge.yml

diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
new file mode 100644
index 0000000..632ad1d
--- /dev/null
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -0,0 +1,28 @@
+name: Dependabot auto-merge
+
+on: pull_request
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge:
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Fetch metadata
+        id: meta
+        uses: dependabot/fetch-metadata@v3
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+      # Auto-merge low-risk updates: individual minor/patch, the minor-and-patch
+      # group (defined in dependabot.yml as minor+patch only), and the
+      # github-actions group. Majors and requirement-updates (update-type null,
+      # e.g. constraint loosening) are deliberately left for review.
+      - name: Auto-merge minor, patch & groups
+        if: ${{ steps.meta.outputs.update-type == 'version-update:semver-minor' || steps.meta.outputs.update-type == 'version-update:semver-patch' || steps.meta.outputs.dependency-group == 'minor-and-patch' || steps.meta.outputs.dependency-group == 'github-actions' }}
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}