From efcae9b5e7dcc4a1903e9ec416ea24d6c4cf5d6b Mon Sep 17 00:00:00 2001 From: "x.qntx.eth" Date: Tue, 1 Sep 2026 03:15:33 +0800 Subject: [PATCH] fix(ci): Dependabot sweep on schedule only Drop pull_request. schedule + workflow_dispatch call ops-dependabot@v2. --- .github/workflows/dependabot.yml | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index f3d5004..075d71d 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -1,12 +1,9 @@ # Caller owns on:. Pin at @v2. -# pull_request: try to queue GitHub auto-merge (no-op without required checks). # schedule: squash-merge Dependabot PRs whose checks are green. -# Do not checkout the PR. This workflow does not approve. -# If rulesets require reviews, add a bypass for Dependabot or pass TOKEN. +# workflow_dispatch: same sweep. Do not checkout the PR. Does not approve. name: Dependabot on: - pull_request: schedule: - cron: '*/15 * * * *' workflow_dispatch: @@ -17,9 +14,6 @@ permissions: jobs: merge: - if: >- - github.event_name != 'pull_request' - || github.event.pull_request.user.login == 'dependabot[bot]' permissions: contents: write pull-requests: write