ci: automerge updates to dependencies after running tests

[zimeg]

Summary

This PR automerges updates to dependencies matching patch or minor versions from the most kind @dependabot!

• https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enabling-automerge-on-a-pull-request

Reviewers

I'm so curious if this is the right scope of dependencies to merge? When merging these I often use CI passing as validation while keeping watch for CVEs appearing later.

This automation matches that in a workflow. Before releasing a version to the public we might confirm dependencies continue to match our expectations 🤖 🔐 ✨

Notes

Some changes are required to configurations of repositories:

• Allow auto-merge: This must be allowed!
• Branch protection: "Require status checks to pass before merging" ought be true and include all relevant tests!
• Branch protection: "Require branches to be up to date before merging" might be true also.

Related reading: https://github.blog/changelog/2025-10-06-upcoming-changes-to-github-dependabot-pull-request-comment-commands/

Requirements

• I've read and understood the Contributing Guidelines and have done my best effort to follow them.
• I've read and agree to the Code of Conduct.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.00%. Comparing base (9ae0867) to head (e95993d).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #239      +/-   ##
==========================================
- Coverage   63.01%   63.00%   -0.01%     
==========================================
  Files         212      212              
  Lines       21857    21857              
==========================================
- Hits        13773    13772       -1     
- Misses       7016     7020       +4     
+ Partials     1068     1065       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[mwbrooks]

✅ Super cool, thanks for bringing this into the Slack CLI repo!

🧠 I agree that semver:patch and semver:minor are safe scopes to have auto-approval and auto-merge. For minors, it's nice to look over the CHANGELOG to know what's new, but this shouldn't block merges.

🤖 I'm down to give this a try!

[zimeg]

@mwbrooks I'm excited as well!

Hoping this lets us continue to develop with the latest changes so I'll merge this. Will report back having updated the settings of this repository with #236 #237 #238 soon 🤖 ✨