# Prepare Dependabot Prs

> Use when preparing GitHub Dependabot pull requests by listing open PRs, verifying they are authored by app/dependabot, enabling auto-merge, and approving them without merging manually.

- Skill: `tomevault-io/prepare-dependabot-prs` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/prepare-dependabot-prs`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/prepare-dependabot-prs/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/prepare-dependabot-prs

---


# Prepare Dependabot PRs

Use this skill for repetitive Dependabot PR preparation in this repository.

## Task List

Use a plain Markdown checklist so the workflow is easy to follow in AI Agent:

```md
- [ ] Confirm GitHub auth and list open Dependabot PRs
- [ ] Enable auto-merge with squash for each PR
- [ ] Approve each PR
- [ ] Summarize prepared PRs and any blockers
```

## Workflow

1. Confirm GitHub CLI access.
2. List open PRs authored by `app/dependabot`.
3. Enable auto-merge with squash for each eligible PR.
4. Approve each eligible PR.
5. Report any PRs skipped because of missing permissions, unexpected changes, or policy blockers.

## Commands

```bash
gh auth status
gh pr list --author app/dependabot --state open --json number,title,url,headRefName
gh pr view <pr-number> --json author,files,title,url
gh pr merge --auto --squash <pr-number>
gh pr review --approve <pr-number>
```

## Validation

- Confirm each acted-on PR now shows auto-merge enabled.
- Confirm each acted-on PR has an approval from the current reviewer.

## Guardrails

- Do not merge PRs manually; this skill only prepares them for CI-driven auto-merge.
- Skip any PR that is not clearly a Dependabot dependency update.
- If branch protection, reviewer rules, or GitHub permissions block the workflow, stop and report the blocker.

---
> Source: [help-me-mom/ng-mocks](https://github.com/help-me-mom/ng-mocks) — distributed by [TomeVault](https://tomevault.io).
<!-- tomevault:4.0:skill_md:2026-06-19 -->