bobeenlee/PR Dependency Guard
Block merging a PR until its declared prerequisite PRs are merged. Reads 'Depends on #N' from PR body and 'depends-on-N' labels.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 24, 2026
- License
- MIT
Pinned Snippet
uses: bobeenlee/pr-dependency-guard@84e1f8835d9b69a3beefd9f4350317250f862f59 # v1.0.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token with pull-requests:write permission | no | ${{ github.token }} |
| target-branches | Comma-separated branches to enforce on. PRs targeting other branches pass silently. | no | main,develop,master |
| bypass-label | Label name that, when present on the PR, skips the check (records bypass in the sticky comment). | no | skip-dependency-check |
| keywords | Comma-separated case-insensitive keywords recognized in the PR body before '#N'. | no | Depends on,Blocked by,After |
| label-prefix | Label prefix that declares a dependency. 'depends-on-123' means this PR depends on PR #123. | no | depends-on- |
Outputs
no outputs