actions-marketplace-validations/Dependabot Auto Merge

Automatically merge Dependabot PRs when version comparison is within range

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Feb 20, 2023
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: actions-marketplace-validations/ahmadnassri_action-dependabot-auto-merge@4b9c6f0185a1c94f18bc293dc050c8c073b4fcc8 # no releases — HEAD as of 2026-07-15

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
github-tokenThe GitHub token used to merge the pull-requestyes
configPath to configuration file (relative to root)no.github/auto-merge.yml
commandThe command to pass to Dependabot as a commentnomerge
botNameThe bot to tag in approve/comment message. You can use this to create your own merge bot.nodependabot
approveAuto-approve pull-requestsnotrue
targetThe version comparison target (major, minor, patch). This is ignored if .github/auto-merge.yml existsnopatch

no outputs