From 846cc9ca9cec77b851e33019e3e98d0c2c2a8068 Mon Sep 17 00:00:00 2001
From: Maarten Bruna <14947039+ictbeheer@users.noreply.github.com>
Date: Fri, 3 Jul 2026 14:36:04 +0200
Subject: [PATCH 1/2] feat: dependabot composite action

---
 dependabot-automerge/action.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 dependabot-automerge/action.yml

diff --git a/dependabot-automerge/action.yml b/dependabot-automerge/action.yml
new file mode 100644
index 0000000..8a8b7b8
--- /dev/null
+++ b/dependabot-automerge/action.yml
@@ -0,0 +1,16 @@
+name: Dependabot automerge
+description: Automatically approves and merges Dependabot pull requests.
+inputs:
+  github-token:
+    description: GitHub token with write permissions to the repository.
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - name: Enable auto-merge for Dependabot PRs
+      if: github.event.pull_request.user.login == 'dependabot[bot]'
+      shell: bash
+      run: gh pr review "$PR_URL" --approve && gh pr merge "$PR_URL" --admin --rebase
+      env:
+        PR_URL: ${{github.event.pull_request.html_url}}
+        GH_TOKEN: ${{inputs.github-token}}
\ No newline at end of file

From 829fd015faff95a5798e2c48bc2771aeb6c25198 Mon Sep 17 00:00:00 2001
From: Maarten Bruna <14947039+ictbeheer@users.noreply.github.com>
Date: Tue, 21 Jul 2026 17:36:38 +0200
Subject: [PATCH 2/2] chore: use dependabot composite action

---
 .github/workflows/dependabot-automerge.yml | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index ee84784..c8aa809 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -16,8 +16,6 @@ jobs:
         runs-on: ubuntu-latest
         if: github.event.pull_request.user.login == 'dependabot[bot]'
         steps:
-            - name: Enable auto-merge for Dependabot PRs
-              run: gh pr review "$PR_URL" --approve && gh pr merge "$PR_URL" --admin --rebase
-              env:
-                  PR_URL: ${{github.event.pull_request.html_url}}
-                  GH_TOKEN: ${{secrets.YARD_BOT_PAT}}
+        - uses: ./.github/workflows/dependabot-automerge/action.yml
+          with:
+              github-token: ${{secrets.YARD_BOT_PAT}}