From 322672d0bb38f9795de4d880807eba3caec6fdde Mon Sep 17 00:00:00 2001
From: Gudsfile <gudsfile@protonmail.com>
Date: Thu, 18 Jun 2026 00:51:37 +0200
Subject: [PATCH 1/2] feat(): enable auto-merge on bump PRs

Enable auto-merge (squash) on newly created bump/duckdb-* PRs so they
merge automatically once all required status checks pass. Skipped on
PR updates (idempotent runs) to avoid redundant gh calls.

Requires repository setting "Allow auto-merge" and branch protection
on main with required status checks configured.
---
 .github/workflows/bump-duckdb.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/bump-duckdb.yml b/.github/workflows/bump-duckdb.yml
index 50362fd..83d45d0 100644
--- a/.github/workflows/bump-duckdb.yml
+++ b/.github/workflows/bump-duckdb.yml
@@ -63,6 +63,7 @@ jobs:
         run: echo "${{ steps.pypi.outputs.version }}" > .github/.duckdb-version
 
       - name: Create pull request
+        id: create-pr
         if: steps.diff.outputs.changed == 'true'
         uses: peter-evans/create-pull-request@v8
         with:
@@ -80,3 +81,9 @@ jobs:
             > [!NOTE]
             > If `PYTHON_VERSIONS` needs updating (new Lambda runtime or DuckDB dropped/added support), edit `.github/workflows/build-layer.yml` directly on this branch before merging.
           labels: dependencies
+
+      - name: Enable auto-merge
+        if: steps.diff.outputs.changed == 'true' && steps.create-pr.outputs.pull-request-operation == 'created'
+        run: gh pr merge --auto --squash "${{ steps.create-pr.outputs.pull-request-number }}"
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}

From 1cc8c87515a5a991908f30a7d211af2423bb0b72 Mon Sep 17 00:00:00 2001
From: Gudsfile <gudsfile@protonmail.com>
Date: Tue, 23 Jun 2026 16:58:25 +0200
Subject: [PATCH 2/2] ci(): add all-builds-passed summary job as single branch
 protection gate

---
 .github/workflows/build-layer.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.github/workflows/build-layer.yml b/.github/workflows/build-layer.yml
index efd8feb..715c499 100644
--- a/.github/workflows/build-layer.yml
+++ b/.github/workflows/build-layer.yml
@@ -91,6 +91,20 @@ jobs:
           path: duckdb-${{ needs.setup.outputs.duckdb-version }}-python-${{ matrix.python-version }}-${{ matrix.architecture }}.zip
           retention-days: 1
 
+  ################################
+  #### GATE
+  all-builds-passed:
+    name: All builds passed
+    needs: [package-duckdb]
+    if: always()
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check matrix result
+        run: |
+          if [ "${{ needs.package-duckdb.result }}" != "success" ]; then
+            exit 1
+          fi
+
   ################################
   #### PUBLISH LAYERS
   publish-layer: