navikt/Automerge Dependabot Pull Requests
Automatically merge pull requests created by Dependabot with configurable rules and workflow summary
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 7, 2026
- License
- MIT
Pinned Snippet
uses: navikt/automerge-dependabot@0e342d25820ca0d2941dcdcad4b7bbb59ad59122 # v1.5.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| token | The name of the variable that contains the GitHub token | yes | GITHUB_TOKEN |
| minimum-age-of-pr | The minimum age of the pull request in days before it can be automerged | no | 0 |
| blackout-periods | Periods of time, months, or days when the action should not run (e.g., "Dec 24-Jan 5", "Sat,Sun", "9:00-17:00") | no | — |
| ignored-dependencies | Comma-separated list of dependencies to ignore (will not be automerged) | no | — |
| always-allow | Comma-separated list of patterns to always allow. Use * to always allow all non-semver dependencies, or specify patterns like 'name:string' to match dependencies containing a specific string | no | — |
| always-allow-labels | Comma-separated list of PR labels that will bypass all filters and allow automerging (e.g., "automerge,dependencies") | no | — |
| ignored-versions | Comma-separated list of specific versions to ignore (format package@version, e.g., "lodash@4.17.21,axios@0.21.1") | no | — |
| semver-filter | Filter based on semver level changes (comma-separated list of major, minor, patch, unknown) | no | patch,minor |
| merge-method | The merge method to use (merge, squash, rebase). Note that only 'merge' method is supported with GitHub merge queues. | no | merge |
| retry-delay-ms | Delay in milliseconds between retries when checking PR mergeability. Lower values speed up tests, higher values provide more robustness. | no | 2000 |
| auto-approve | Whether to automatically approve PRs before merging them | no | false |
| update-branch-before-merge | Whether to update PR branches that are behind the base branch before merging | no | false |
| max-update-wait-seconds | Maximum time in seconds to wait for checks to pass after updating a PR branch | no | 300 |
Outputs
| name | description |
|---|---|
| merged-pr-count | The number of pull requests that were successfully merged during execution |