build(deps): bump github/codeql-action/analyze from 4.38.1 to 4.38.2 #499

	name: Auto-merge Dependabot PRs
Check warning on line 1 in .github/workflows/auto-merge-dependabot.yml View workflow run for this annotation GitHub Actions / Auto-merge Dependabot PRs Workflow execution policy warning (evaluate mode) On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target

	on: pull_request_target

	permissions:
	pull-requests: write
	contents: write

	jobs:
	merge-dependabot-pr:
	runs-on: ubuntu-22.04
	if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
	steps:
	- name: Fetch Dependabot metadata
	id: dependabot-metadata
	uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
	- name: Enable auto-merge for minor updates
	if: ${{ steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' }}
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	gh pr review --approve ${{ github.event.pull_request.html_url }}
	gh pr merge --auto --squash ${{ github.event.pull_request.html_url }}

Navigation Menu