[blink1073]

Adds a Dependabot auto-merge workflow and enables auto-merge for the lock and pre-commit update PRs.

Staggers the three weekly jobs:

• Monday 6am — lock-update
• Tuesday — dependabot
• Wednesday 9am — pre-commit autoupdate

[greptile-apps]

Confidence Score: 4/5

[High impact] Enables automatic merging of dependency and maintenance updates.

Fix the Dependabot workflow's read-only token before merging.

Findings

1.  Dependabot auto-merge fails ▶

Summary

Adds automatic merging for maintenance updates and spreads the weekly jobs across three days.

• Weekly dependency updates now run on three separate days.
• Eligible dependency update pull requests are queued for automatic merging.

_{Reviews (1) · Last reviewed commit: "ci: auto-merge update PRs and stagger ma..." · Reviewed by Greptile}

[greptile-apps]

Dependabot auto-merge fails

If the repository uses GitHub's default Dependabot settings, this pull_request workflow receives a read-only GITHUB_TOKEN despite the declared write permissions. For patch and minor updates, gh pr review --approve fails, so the workflow never reaches gh pr merge.

Use pull_request_target for this metadata-only workflow. Keep the Dependabot author check and avoid checking out or running PR code.

Suggested change

	on: pull_request
	on: pull_request_target

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.03%. Comparing base (ee9727f) to head (7f3feaa).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #387   +/-   ##
=======================================
  Coverage   93.03%   93.03%           
=======================================
  Files           6        6           
  Lines         445      445           
=======================================
  Hits          414      414           
  Misses         31       31           

Flag	Coverage Δ
linux	92.80% <ø> (ø)
windows	93.03% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.