[don-petry]

Summary

• Adds .github/workflows/dependabot-automerge.yml verbatim from the org standard template (petry-projects/.github/standards/workflows/dependabot-automerge.yml)
• The allow_auto_merge repository setting was flipped to true out-of-band via the GitHub API (see note below). This PR does not include a settings-as-code change because this codebase has no settings-as-code mechanism (no settings.yml / Probot Settings App, no Terraform/Pulumi config) — repository settings are managed manually per the org standard.

Why

The weekly compliance audit flagged this repository as non-compliant because allow_auto_merge was false. Per the standards, this setting must be true to support the Dependabot auto-merge workflow.

The dependabot-automerge.yml workflow is a thin caller stub that delegates to the org-level reusable workflow (dependabot-automerge-reusable.yml@v1). All eligibility logic and the GitHub App token dance live in that reusable workflow.

Note on allow_auto_merge (addresses Copilot review feedback)

The reviewer correctly pointed out that the original PR description implied a code change that does not exist in the diff. To clarify:

• What this PR contains: the workflow file only.
• What was changed out-of-band: allow_auto_merge=true, applied directly via PATCH /repos/petry-projects/.github-private because there is no settings-as-code surface in this repo.
• Audit follow-up: if a settings-as-code mechanism is later adopted org-wide, this repo's allow_auto_merge: true value should be captured there to keep future audits green without manual intervention.

Closes #56

Generated with Claude Code

[coderabbitai]

Warning

Rate limit exceeded

@don-petry has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 58 minutes and 43 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 5a0c64a3-645c-48dc-a86e-7517f5f589af

📥 Commits

Reviewing files that changed from the base of the PR and between 5042df9 and 0a6b83b.

📒 Files selected for processing (1)

• .github/workflows/dependabot-automerge.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/issue-56-20260508-1409

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Adds the org-standard Dependabot auto-merge caller workflow to this repository as part of bringing the repo into compliance with the allow_auto_merge standard default.

Changes:

• Added .github/workflows/dependabot-automerge.yml as a thin caller stub to the org-level reusable Dependabot auto-merge workflow.
• (Per PR description) allow_auto_merge was enabled on the repository via GitHub API (note: not represented as a code change in this PR).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[don-petry]

Good catch — addressed in the updated PR description. This repo has no settings-as-code surface (no settings.yml / Probot Settings App, no IaC config), so option (a) applies: I've clarified that allow_auto_merge=true was applied out-of-band via the GitHub API. If a settings-as-code mechanism is adopted org-wide later, this value should be captured there for audit reproducibility.

---

Generated by Claude Code