feat: implement issue #219 — Compliance: non-stub-dependabot-automerge.yml

.github/workflows/dependabot-automerge.yml

@@ -1,35 +1,11 @@
-# ─────────────────────────────────────────────────────────────────────────────
-# SOURCE OF TRUTH: petry-projects/.github/standards/workflows/dependabot-automerge.yml
-# Standard:        petry-projects/.github/standards/dependabot-policy.md
-# Reusable:        petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml
-#
-# AGENTS — READ BEFORE EDITING:
-#   • This file is a THIN CALLER STUB. All eligibility logic and the GitHub
-#     App token dance live in the reusable workflow above.
-#   • You MAY change: nothing in this file in normal use. Adopt verbatim.
-#   • You MUST NOT change: trigger event (must be `pull_request_target`),
-#     the `uses:` line, `secrets: inherit`, or the job-level `permissions:`
-#     block — reusable workflows can be granted no more permissions than the
-#     calling job has, so removing the stanza breaks the reusable's gh API
-#     calls.
-#   • If you need different behaviour, open a PR against the reusable in the
-#     central repo.
-# ─────────────────────────────────────────────────────────────────────────────
-#
-# Dependabot auto-merge — thin caller for the org-level reusable.
-# To adopt: copy this file to .github/workflows/dependabot-automerge.yml in your repo.
-# Required org/repo secrets (inherited):
-#   APP_ID         — GitHub App ID with contents:write and pull-requests:write
-#   APP_PRIVATE_KEY — GitHub App private key
+# Don't modify trigger event, `uses` line, `secrets: inherit`, or job-level `permissions` block!
+# Source of truth: petry-projects/.github/standards/workflows/dependabot-automerge.yml
 name: Dependabot auto-merge
-
 on:
   pull_request_target:
     branches:
       - main
-
 permissions: {}
-
 jobs:
   dependabot-automerge:
     permissions:

.gitignore

@@ -30,3 +30,5 @@ build/
 .DS_Store
 Thumbs.db
 .dev-lead/
+.dev-lead/
+.dev-lead/