Synchronize common files from prometheus/prometheus

.github/dependabot.yml

@@ -1,3 +1,6 @@
+###
+# This file is synced from https://github.com/prometheus/prometheus
+###
 version: 2
 updates:
   - package-ecosystem: "gomod"
@@ -30,6 +33,7 @@ updates:
           - "github/codeql-action*"
     # Exclude configs synced from upstream prometheus/prometheus.
     exclude-paths:
+      - .github/workflows/approve-workflows.yml
       - .github/workflows/container_description.yml
       - .github/workflows/golangci-lint.yml
       - .github/workflows/govulncheck.yml

.github/workflows/approve-workflows.yml

@@ -0,0 +1,27 @@
+---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
+name: Approve pending workflows
+
+on:
+  issue_comment:
+    types: [created]
+
+permissions: read-all
+
+jobs:
+  approve:
+    if: >-
+      github.event.issue.pull_request &&
+      github.event.comment.body == '/workflow-approve' &&
+      github.repository_owner == 'prometheus'
+    runs-on: ubuntu-latest
+    permissions:
+      actions: write
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: prometheus/promci/approve_workflows@370e8c15dcec50043cbe66f2f34633d9efc0a190
+        with:
+          github_token: ${{ github.token }}

.github/workflows/govulncheck.yml

@@ -1,4 +1,7 @@
 ---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
 name: govulncheck
 on:
   pull_request: