| name | dependabot-prs |
| description | Review and merge open Dependabot pull requests |
| disable-model-invocation | true |
| allowed-tools | Bash, Read, Agent |
Follow these steps:
Read ~/.claude/dependabot-prs.json (if it exists) and look up the current repo's entry:
config="$HOME/.claude/dependabot-prs.json"
repo=$(gh repo view --json nameWithOwner --jq .nameWithOwner)
preferences=""
if [ -f "$config" ]; then
preferences=$(jq -r --arg repo "$repo" '.[$repo] // empty' "$config")
fi
The file maps owner/repo to freeform instructions, e.g.:
{
"ryanb/core-gem": "Only handle PRs with the javascript label."
}
If $preferences is non-empty, apply those instructions throughout the rest of the steps — for example, filtering the PR list, narrowing what to merge, or changing the merge strategy.
Run gh pr list --author "dependabot[bot]" --state open to get all open Dependabot PRs.
If there are no open PRs, tell the user and stop.
For each PR, launch a sub-agent (run them in parallel) to review it. Each sub-agent should:
gh pr view <number> --json title,body,statusCheckRollup,mergeablePresent a table summarizing all PRs:
Ask the user which PRs they'd like to merge. Wait for their response.
For each PR the user wants merged, one at a time:
gh pr review <number> --approvegh pr merge <number> --mergeReport the result of each merge.
Evaluate pending (unsubmitted) review comments on the current branch's PR and, after user confirmation, address each in a separate sub-agent and separate commit.
Evaluate unresolved review comments on the current branch's PR and, after user confirmation, address each in a separate sub-agent and separate commit.
Walk through PR changes from the user's perspective. Traces each UI change through its full vertical slice — what the user sees, what it triggers, and how the server handles it. Use when asked to walk through what changed, review a PR, or summarize branch changes.
Run bin/claude-review --print and automatically fix all reported issues, committing each fix individually.
Amend a git commit further back in the history.
Summarize work done since the last standup across the user's configured repos — merged PRs, open PR reviews, PRs/commits authored, and a per-repo summary of code changes.