[loks0n]

Replaces this repo's dependabot-auto-merge.yml with a call to the shared workflow from appwrite/.github#132, pinned to its merge commit.

The shared gate runs after each workflow a PR triggers, from the default branch, so a PR can't change it. For a Dependabot patch or minor update it waits for every workflow run, check run and commit status on the exact head SHA, approves when all of them pass, and merges with --match-head-commit. Majors and failures stay for a human. Because it merges directly, the repo doesn't need Allow auto-merge or required status checks.

Part of fixing Dependabot auto-merge across both orgs: 0 bot merges in 30 days, 266 open PRs.

🤖 Generated with Claude Code

[hansi-codes]

🟢 Tier S · Ready to merge

The added permission is read-only and supports the shared gate’s workflow-run checks.

The repository’s Dependabot workflow now runs after the dependency-audit and template-build workflows complete and calls the shared auto-merge workflow pinned to a commit. It grants that workflow read access to Actions, checks, and statuses, and write access to contents and pull requests.

Latest changes: The newest commit adds actions: read so the shared gate can inspect workflow runs for the pull request’s head SHA.

Verdict	New comments	Fixed	Still open
✅ Approved	0	0	0

📂 Walkthrough · 1

File	Change
.github/workflows/dependabot-auto-merge.yml	Call the pinned shared Dependabot gate after the relevant workflows complete, with the required token permissions.

---

_{Reviewed the commits since ab66145 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟢 Tier S · Looks good to merge. Summary