From a10e97ec69b7e226543eddf8ec0b2df05820ac94 Mon Sep 17 00:00:00 2001
From: Chielo <mail@chielo.org>
Date: Tue, 21 Jul 2026 22:06:32 +0800
Subject: [PATCH] misc(ci): add dependabot auto-merge job

---
 .github/workflows/ci.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 378eab9..845d5bf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -151,3 +151,21 @@ jobs:
             *.tar.gz
           prerelease: ${{ contains(github.ref, 'alpha') || contains(github.ref, 'beta') }}
           fail_on_unmatched_files: true
+
+  dependabot:
+    name: Dependabot auto-merge
+    if: github.actor == 'dependabot[bot]' && github.event_name == 'pull_request'
+    needs: [style, tests, build, sdist]
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
+      actions: write
+    steps:
+      - name: Approve and merge
+        run: |
+          gh pr review --approve "$PR_URL"
+          gh pr merge --squash --auto "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}