ci: Dependabot auto-merge — base-controlled dependabot-gate + trace carve-out (Tier 3, operator-merge) - #113

Merged

sumitake merged 12 commits into

mainfrom

dev/claude/dependabot-automerge

Aug 18, 2026

Commits on Aug 18, 2026

ci: Dependabot auto-merge — Codex-review-gated arming + validate-trace carve-out with commit-author guard

sumitake
and
claude
committed
f0b5c7b
ci(dependabot): required-context clean-signal + authenticity gates (Codex r1 REQUEST_CHANGES integrated)

sumitake
and
claude
committed
a8f9ba4
ci(dependabot): move gate to base-controlled dependabot-gate context (Codex r2 integrated)

sumitake
and
claude
committed
47ca27e
ci(dependabot): drop redundant best-effort disarm job (reliability-baseline pass)

sumitake
and
claude
committed
aab0d1c
test: run trust-boundary pins — unittest.main() was mid-file, silently skipping them (Codex bounded-confirm catch)

sumitake
and
claude
committed
ff7a2aa
ci(dependabot): pull_request_target mutations + empty-commit fail-closed; sync with workspace redesign

sumitake
and
claude
committed
b9f85ba
ci(dependabot): arm fail-closed on gate-not-required (Codex connector P1) + changelog fragment (P2)

sumitake
and
claude
committed
bf002bc
test(dependabot): add path-existence pin to the gate trust-boundary tests (GLM c1 parity)

sumitake
and
claude
committed
199b097
ci(dependabot): require verification reason=valid to pin web-flow signer (Codex connector P2)

sumitake
and
claude
committed
6d1e82d
ci(dependabot): document cross-repo central branch-protection provisioning (Codex connector self-containment)

sumitake
and
claude
committed
c9409d6
ci(dependabot): retrigger waits for in-progress gate run before rerun (Codex connector P2 race)

sumitake
and
claude
committed
9177e49
docs(dependabot): document operator-accepted provenance residual; honest commit-filter docstring

sumitake
and
claude
committed
c5cbcb8