feat: auto-merge non-breaking dependency updates #5

Merged
naomi merged 4 commits from feat/merge into main 2026-02-20 20:04:19 -08:00

4 Commits

Author SHA1 Message Date
hikari 53c73d0093 fix: resolve all ESLint warnings
Node.js CI / CI (pull_request) Successful in 26s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 59s
- Improved JSDoc description for getCommitStatus method
- Fixed import to use type-only import for Logger
- Capitalized comment beginnings
- Added ESLint disable comments with descriptions for mock logger
- Fixed key spacing alignment

All linter warnings are now resolved!
2026-02-20 19:58:33 -08:00
naomi 7014fc470e chore: lockfile
Node.js CI / CI (pull_request) Failing after 22s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 51s
2026-02-20 19:55:53 -08:00
hikari b7b53c70f8 fix: pin vitest dependencies to exact versions
Node.js CI / CI (pull_request) Failing after 11s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 55s
Removed ^ prefixes from @vitest/coverage-istanbul, @vitest/coverage-v8, and vitest to comply with dependency pinning requirements.
2026-02-20 19:53:38 -08:00
hikari 86d8c1ac93 feat: add auto-merge for non-major dependency updates
Node.js CI / CI (pull_request) Failing after 8s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 50s
Minori now automatically merges dependency update PRs when:
- The update is NOT a major version bump (to avoid breaking changes)
- The CI checks pass (status = "success")
- An existing PR for the dependency update is found

This reduces manual work for safe, non-breaking dependency updates
whilst still requiring human review for potentially breaking changes.

Changes:
- Add version comparison utility to detect major version bumps
- Add Gitea service methods for commit status and PR merging
- Add auto-merge logic to update orchestrator
- Add comprehensive tests for new functionality
2026-02-20 19:31:03 -08:00