Auto-merge every green Dependabot update, majors included

[sapn95]

Every major the auto-merge workflow held back ended the same way: the checks
were green, the release notes said nothing the tests had not already answered,
and a person pressed the button days later. The gate cost latency and bought
nothing, so it is gone: any Dependabot pull request now merges itself once
every check on the vetted commit is green — patch, minor and major alike.

What changed in dependabot-auto-merge.yml:

• The semver gate and dependabot/fetch-metadata are removed — nothing needs
  the update type any more, which is also one third-party action less in the
  merge path. The commit vetting (all commits authored by dependabot[bot],
  signed, merged with --match-head-commit) is unchanged.
• The no-automerge label is the manual hold, replacing automerge-ok, which
  labelled the common case instead of the exception. A run reads it at start;
  the daily sweep respects it too.
• CLEAN no longer merges on its own: both CLEAN and UNSTABLE wait until every
  check that is not this workflow's own has passed or been skipped, counted by
  bucket rather than state, so a cancelled or held check keeps the pull
  request open. This also gives the workflow a defined answer on a repository
  without branch protection.
• The daily sweep now lists every open Dependabot pull request instead of the
  labelled ones.

In settings, not in this diff: "require branches to be up to date" is switched
off for main. A Dependabot branch cannot be brought up to date automatically
(a GITHUB_TOKEN push triggers no checks, and Dependabot ignores rebase
commands from bots), so the strict rule parked the second grouped update of
the week until Dependabot's next weekly run — today's stalled setup-uv bump
in browser-in-a-box was exactly that. The required checks themselves stay.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: f3648b96-176d-4999-bd64-2e0dbb054c19

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}