fix(yo61): enable auto-merge on reportlab-pdf, and record the missing approver - #71
Merged
Conversation
Decision 2026-08-03 lists this repo as fully wired for review-gated auto-merge, but `allow_auto_merge` was never encoded, so it inherited the module default of false. It was the only repo in the policy set missing the flag. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
The review-gated auto-merge policy treats lastlight's approval as the "vetted" clause, but lastlight only enables auto-merge — it exposes no approve capability. Green Dependabot PRs end up armed and one approval short indefinitely. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Two changes from investigating why 26 green Dependabot PRs across
yo61are not merging.data/yo61/claude-plugin-reportlab-pdf.yaml— addallow_auto_merge: true.Decision
2026-08-03-plugin-repos-review-gated-automergelists this repo under "Done (flag + in-code CI-gate)" and uses it as the template for the policy, but the flag was never encoded in its YAML, so it inherited the module default offalse. It was the only repo in the policy set missing it —civi-mcp,claude-plugin-contributory-factors,claude-skills,gh-release-stats,go-udap,homebrew-tap,homelab-docs,jobhound,unifi-mcpandunifictlall set it.Scoped plan:
CLAUDE.md— document a gap between this repo's policy and lastlight.The policy sets
default_branch_ruleset_required_approving_review_count: 1and treats lastlight's approval as the "vetted" clause. lastlight does not approve pull requests: itsdependabot-pr-mergeworkflow only enables auto-merge, its prompt states it "pre-empts no review", and the codebase exposes no approve capability. Green dependency PRs are therefore armed for auto-merge and one approval short indefinitely.Observed 2026-08-15 across
yo61: 26 open Dependabot PRs, allMERGEABLEwith every check green, auto-merge armed on 21,reviews=0on all 26.The note also separates this from the stale-verdict failure in
2026-08-10-post-apply-pr-reevaluation— that one has an approval present and a cached blocker, and re-arming auto-merge clears it. This one has no approval, so re-arming does nothing.Not in this PR
No decision file. Fixing the gap means either adding an approve step to lastlight or dropping the review count here and letting the no-bypass status-checks ruleset carry the gate alone. That choice is unmade.
Applying this does not merge anything: reportlab-pdf's four open Dependabot PRs are already armed but still unapproved.