Repository navigation
Conversation
Comment `@dependabot rebase` on the oldest open Dependabot PR that has auto-merge enabled and is `BEHIND` its base branch. Runs on push to `main`, because Dependabot does not rebase PRs that are only behind. - Rebase one PR per run, so each merge to `main` triggers the next. - Skip PRs with commits not authored by Dependabot, and PRs with a rebase request newer than the last push. - Skip PRs that are blocked, as rebasing would not unblock them. - Wait while GitHub still reports `UNKNOWN` merge state for auto-merge PRs, and warn about those still unknown after the last attempt. - The reusable workflow needs no `GITHUB_TOKEN` permissions, since every request uses the caller's PAT. - Document that pushes made with `GITHUB_TOKEN` do not trigger the workflow.
caugner
force-pushed
the
auto-rebase-dependabot-prs
branch
from
October 22, 2026 15:14
a5cd367 to
8a1c938
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Add an
auto-rebasereusable workflow, and call it from this repo on pushes tomain. It comments@dependabot rebaseon the oldest open Dependabot PR that is behind its base branch and has auto-merge enabled.UNKNOWN.Motivation
Ensure Dependabot PRs can auto-merge in repositories that require branches to be up to date. Dependabot does not rebase PRs that are only behind, so they stay blocked after another PR merges.
Additional details
maintriggers the next rebase.mergeStateStatus == BEHIND, which GitHub reports only when up-to-date branches are required, so no per-repo configuration is needed.Related issues and pull requests