From 1411d39277d24e4f907ac55ffc6169bde58b6c3b Mon Sep 17 00:00:00 2001
From: "Mathias L. Baumann" <mathias.baumann@frequenz.com>
Date: Mon, 20 Oct 2025 15:28:48 +0200
Subject: [PATCH] Add Dependabot auto-merge workflow

Use commit hash for dependabot-auto-approve action for better
security and reproducibility.

Signed-off-by: Mathias L. Baumann <mathias.baumann@frequenz.com>
---
 .github/workflows/auto-dependabot.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .github/workflows/auto-dependabot.yaml

diff --git a/.github/workflows/auto-dependabot.yaml b/.github/workflows/auto-dependabot.yaml
new file mode 100644
index 0000000..e7cff98
--- /dev/null
+++ b/.github/workflows/auto-dependabot.yaml
@@ -0,0 +1,19 @@
+name: Auto-merge Dependabot PRs
+
+on:
+  pull_request:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge:
+    if: github.actor == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Auto-merge Dependabot PR
+        uses: frequenz-floss/dependabot-auto-approve@3cad5f42e79296505473325ac6636be897c8b8a1 # v1.3.2
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          merge-method: 'merge'