From 26809de651610f6fb59424147bc392e9a6a22ee5 Mon Sep 17 00:00:00 2001
From: prombot <prometheus-team@googlegroups.com>
Date: Wed, 15 Jul 2026 18:09:54 +0000
Subject: [PATCH] Update common Prometheus files

Signed-off-by: prombot <prometheus-team@googlegroups.com>
---
 .github/dependabot.yml                  |  4 ++++
 .github/workflows/approve-workflows.yml | 27 +++++++++++++++++++++++++
 .github/workflows/govulncheck.yml       |  3 +++
 3 files changed, 34 insertions(+)
 create mode 100644 .github/workflows/approve-workflows.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e5a39bcf..7d81d9e7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,3 +1,6 @@
+###
+# This file is synced from https://github.com/prometheus/prometheus
+###
 version: 2
 updates:
   - package-ecosystem: "gomod"
@@ -30,6 +33,7 @@ updates:
           - "github/codeql-action*"
     # Exclude configs synced from upstream prometheus/prometheus.
     exclude-paths:
+      - .github/workflows/approve-workflows.yml
       - .github/workflows/container_description.yml
       - .github/workflows/golangci-lint.yml
       - .github/workflows/govulncheck.yml
diff --git a/.github/workflows/approve-workflows.yml b/.github/workflows/approve-workflows.yml
new file mode 100644
index 00000000..adbcb481
--- /dev/null
+++ b/.github/workflows/approve-workflows.yml
@@ -0,0 +1,27 @@
+---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
+name: Approve pending workflows
+
+on:
+  issue_comment:
+    types: [created]
+
+permissions: read-all
+
+jobs:
+  approve:
+    if: >-
+      github.event.issue.pull_request &&
+      github.event.comment.body == '/workflow-approve' &&
+      github.repository_owner == 'prometheus'
+    runs-on: ubuntu-latest
+    permissions:
+      actions: write
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: prometheus/promci/approve_workflows@370e8c15dcec50043cbe66f2f34633d9efc0a190
+        with:
+          github_token: ${{ github.token }}
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 621476de..374df32b 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -1,4 +1,7 @@
 ---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
 name: govulncheck
 on:
   pull_request: