pirikara/Converge

Safe, hands-off dependency updates — resolves what Dependabot can't, blocks what you shouldn't install.

Trust Signals

name	description	required	default
repository	Target repository as owner/repo. Defaults to the repo running the workflow.	no	${{ github.repository }}
token	GitHub token with contents:write + pull-requests:write (e.g. secrets.GITHUB_TOKEN).	yes	—
apply	Open branches and PRs (true) or dry-run only (false).	no	false
types	Comma-separated bump types to allow (major,minor,patch).	no	minor,patch
strategy	Update strategy: latest \| in-range (in-range never crosses a major).	no	latest
security-only	Only remediate vulnerabilities; skip routine updates (for a high-frequency job).	no	false
limit	Maximum number of PRs to open in one run.	no	5
verbose	Enable debug logging.	no	false

no outputs