merge-dependabot-prs

name	merge-dependabot-prs
description	Discover, evaluate, and optionally merge open Dependabot pull requests with dependency-aware ordering and post-merge verification. Use when asked to process or merge Dependabot PRs for a repository.

Merge Dependabot PRs

Contents

• Workflow
• Authorization
• Discovery and baseline
• Cleanup and report
• references/library-evaluation.md
• references/actions-evaluation.md
• references/merge.md

Workflow

Treat owner/repo as the primary input and infer it from local remotes when possible.

1. Follow Discovery and baseline to inventory PRs, establish a healthy baseline, classify updates, and order work units.
2. Before evaluating library updates, read references/library-evaluation.md. Do not load the Actions evaluation template unless the run also includes Actions updates.
3. Before evaluating GitHub Actions updates, read references/actions-evaluation.md. Do not load the library evaluation template unless the run also includes library updates.
4. If merging is authorized and PASS work units exist, read references/merge.md immediately before the first merge.
5. Follow Cleanup and report after evaluation or merging.

Evaluate work units sequentially unless the user explicitly requested parallel agents. Any editing subagent must use an isolated worktree.

Authorization

Processing can mean evaluation without mutation. Do not approve, merge, push, comment, or open a configuration PR unless the user explicitly authorized those GitHub writes. Before the first write, confirm the exact repository, PR set, merge method, and current branch-protection status.