From 5ff6c0d98314a90468eff61efca0b0a27f10af3f Mon Sep 17 00:00:00 2001 From: WillIsback Date: Thu, 15 Oct 2026 00:11:31 +0200 Subject: [PATCH 1/2] ci(dependabot): auto-merge Dependabot PRs once CI passes --- .github/workflows/dependabot-auto-merge.yml | 25 +++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 .github/workflows/dependabot-auto-merge.yml diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml new file mode 100644 index 0000000..abc326c --- /dev/null +++ b/.github/workflows/dependabot-auto-merge.yml @@ -0,0 +1,25 @@ +name: Dependabot auto-merge + +on: + pull_request: + branches: [main] + types: [opened, synchronize, reopened, ready_for_review] + +# Least privilege: only what enabling auto-merge requires. +permissions: + contents: write + pull-requests: write + +jobs: + auto-merge: + name: Enable auto-merge + runs-on: ubuntu-latest + # Only Dependabot PRs. GitHub will hold the merge until the + # "Build & Test" required status check on the PR_only ruleset passes. + if: github.event.pull_request.user.login == 'dependabot[bot]' + steps: + - name: Enable auto-merge (squash) + run: gh pr merge --auto --squash "$PR_URL" + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 3dac66080fe9213a6cd4bdabb987e057353df8d7 Mon Sep 17 00:00:00 2001 From: WillIsback Date: Thu, 15 Oct 2026 00:23:23 +0200 Subject: [PATCH 2/2] fix(deps): bump rustls to 0.23.46 for RUSTSEC-2026-0346..0349 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 482d1fc..39d4d4d 100755 --- a/Cargo.lock +++ b/Cargo.lock @@ -1249,9 +1249,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "log", "once_cell",