Message-ID: <gh-pgjdbc-pgjdbc-4099@github.com>
From: "vlsi (@vlsi)" <noreply+vlsi@github.com>
To: "pgjdbc/pgjdbc" <noreply+pgjdbc-pgjdbc@github.com>
Date: Mon, 25 May 2026 10:40:20 +0000
Subject: [pgjdbc/pgjdbc] issue #4099: Configuration suggestion: automerge for `actions/*`, `github/*`, `org.ow2.asm`,
List-Id: <gh-pgjdbc-pgjdbc.github.com>
X-GitHub-Author-Id: 213894
X-GitHub-Author-Login: vlsi
X-GitHub-Issue: 4099
X-GitHub-Repo: pgjdbc/pgjdbc
X-GitHub-State: open
X-GitHub-Type: issue
X-GitHub-Url: https://github.com/pgjdbc/pgjdbc/issues/4099
Content-Type: text/plain; charset=utf-8

We have quite a few dependencies, and I believe we can enable automatic merge for certain dependencies provided the tests pass.

For example: `actions/*`, `github/*`. We trust GitHub anyways, so there's nothing to review in `actions/*` changes. Even though the updates are not frequent, even "click-approve" for `actions/checkout` steals maintainers' time.

I have not explored the full list of "trusted dependency vendors", however, even `actions/*` and `github/*` would be helpful.

For GitHub-provided actions, we could even group the updates so Renovate creates a single PR instead of creating separate PRs for `actions/cache` and `actions/setup-java`.

Any thoughts?