feat: implement issue #143 — Compliance: non-stub-dependabot-automerge.yml

.github/workflows/dependabot-automerge.yml

@@ -1,26 +1,27 @@
 # ─────────────────────────────────────────────────────────────────────────────
 # SOURCE OF TRUTH: petry-projects/.github/standards/workflows/dependabot-automerge.yml
-# Standard:        petry-projects/.github/standards/dependabot-policy.md
-# Reusable:        petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml
+# Standard: petry-projects/.github/standards/dependabot-policy.md
+# Reusable: petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml
 #
 # AGENTS — READ BEFORE EDITING:
-#   • This file is a THIN CALLER STUB. All eligibility logic and the GitHub
-#     App token dance live in the reusable workflow above.
-#   • You MAY change: nothing in this file in normal use. Adopt verbatim.
-#   • You MUST NOT change: trigger event (must be `pull_request_target`),
-#     the `uses:` line, `secrets: inherit`, or the job-level `permissions:`
-#     block — reusable workflows can be granted no more permissions than the
-#     calling job has, so removing the stanza breaks the reusable's gh API
-#     calls.
-#   • If you need different behaviour, open a PR against the reusable in the
-#     central repo.
+# • This file is a THIN CALLER STUB. All eligibility logic and the GitHub
+# App token dance live in the reusable workflow above.
+# • You MAY change: nothing in this file in normal use. Adopt verbatim.
+# • You MUST NOT change: trigger event (must be `pull_request_target`),
+# the `uses:` line, `secrets: inherit`, or the job-level `permissions:`
+# block — reusable workflows can be granted no more permissions than the
+# calling job has, so removing the stanza breaks the reusable's gh API
+# calls.
+# • If you need different behaviour, open a PR against the reusable in the
+# central repo.
 # ─────────────────────────────────────────────────────────────────────────────
 #
 # Dependabot auto-merge — thin caller for the org-level reusable.
 # To adopt: copy this file to .github/workflows/dependabot-automerge.yml in your repo.
 # Required org/repo secrets (inherited):
-#   APP_ID         — GitHub App ID with contents:write and pull-requests:write
-#   APP_PRIVATE_KEY — GitHub App private key
+# APP_ID — GitHub App ID with contents:write and pull-requests:write
+# APP_PRIVATE_KEY — GitHub App private key
+
 name: Dependabot auto-merge
 
 on:
@@ -35,5 +36,5 @@ jobs:
     permissions:
       contents: read
       pull-requests: read
-    uses: petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml@e6d47e0571ad88f1c4944be17da5b913dcc8c4e4 # v1
+    uses: petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml@v1
     secrets: inherit