Skip to content

Chore: [AEA-0000] - add dependabot approve schedule#511

Merged
anthony-nhs merged 1 commit intomainfrom
add_dependabot_schedule
Apr 20, 2026
Merged

Chore: [AEA-0000] - add dependabot approve schedule#511
anthony-nhs merged 1 commit intomainfrom
add_dependabot_schedule

Conversation

@anthony-nhs
Copy link
Copy Markdown
Contributor

Add Dependabot schedule to the repository

Copilot AI review requested due to automatic review settings April 20, 2026 14:09
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a scheduled GitHub Actions workflow to auto-approve/enable auto-merge for Dependabot PRs, and removes the previous Dependabot auto-approve job from the pull request pipeline.

Changes:

  • Removed the Dependabot auto-approve-and-merge job from the PR workflow.
  • Added a new scheduled workflow to auto-approve Dependabot dependency update PRs.
  • Deleted .github/CODEOWNERS, removing CODEOWNER gating on workflow changes.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File Description
.github/workflows/pull_request.yml Removes the Dependabot auto-approve job from the PR workflow.
.github/workflows/auto_approve_dependabot.yml New scheduled workflow that auto-approves/enables auto-merge for Dependabot PRs.
.github/CODEOWNERS Removes CODEOWNER rules that previously restricted approvals for workflow changes.
Comments suppressed due to low confidence (1)

.github/CODEOWNERS:1

  • Deleting .github/CODEOWNERS removes the repo’s CODEOWNER protection for workflow changes (previously requiring @NHSDigital/eps-admins review). This weakens change control for GitHub Actions; consider restoring CODEOWNERS (or moving it to the root CODEOWNERS file) so workflow edits still require the intended owners.

Comment thread .github/workflows/auto_approve_dependabot.yml
Comment thread .github/workflows/auto_approve_dependabot.yml
@sonarqubecloud
Copy link
Copy Markdown

@anthony-nhs anthony-nhs changed the title Docs: [AEA-0000] - add Dependabot schedule Docs: [AEA-0000] - add dependabot approve schedule Apr 20, 2026
@anthony-nhs anthony-nhs changed the title Docs: [AEA-0000] - add dependabot approve schedule Chore: [AEA-0000] - add dependabot approve schedule Apr 20, 2026
@anthony-nhs anthony-nhs merged commit bbd957e into main Apr 20, 2026
19 checks passed
@anthony-nhs anthony-nhs deleted the add_dependabot_schedule branch April 20, 2026 16:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants