From 8b6a7fbcc3cebaf31a9658a12d126e7eea9c102c Mon Sep 17 00:00:00 2001
From: Jackie Weng <jweng@linz.govt.nz>
Date: Wed, 4 Feb 2026 08:56:20 +1300
Subject: [PATCH] ci: migrate custom dependabot automation to Kodiak
 ENABLE-6675

---
 .github/workflows/dependabot-automation.yml | 30 ---------------------
 .kodiak.toml                                | 16 +++++++++++
 2 files changed, 16 insertions(+), 30 deletions(-)
 delete mode 100644 .github/workflows/dependabot-automation.yml
 create mode 100644 .kodiak.toml

diff --git a/.github/workflows/dependabot-automation.yml b/.github/workflows/dependabot-automation.yml
deleted file mode 100644
index 23bd44b..0000000
--- a/.github/workflows/dependabot-automation.yml
+++ /dev/null
@@ -1,30 +0,0 @@
-name: Dependabot automation
-
-on: pull_request
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  dependabot:
-    runs-on: ubuntu-latest
-    if: github.actor == 'dependabot[bot]'
-    steps:
-      - name: Dependabot metadata
-        id: metadata
-        uses: dependabot/fetch-metadata@21025c705c08248db411dc16f3619e6b5f9ea21a # v2.5.0
-        with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
-      - name: Approve PR
-        run: gh pr review --approve "$PR_URL"
-        env:
-          PR_URL: ${{ github.event.pull_request.html_url }}
-          GITHUB_TOKEN: ${{ secrets.STEP_GITHUB_ACTION_TOKEN }}
-      - name: Enable auto-merge for Dependabot PRs that doesn't include major version update
-        if: steps.metadata.outputs.update-type != 'version-update:semver-major'
-        run: gh pr merge --auto --squash "$PR_URL"
-        env:
-          PR_URL: ${{ github.event.pull_request.html_url }}
-          GITHUB_TOKEN: ${{ secrets.STEP_GITHUB_ACTION_TOKEN }}
-
diff --git a/.kodiak.toml b/.kodiak.toml
new file mode 100644
index 0000000..cc8d2d5
--- /dev/null
+++ b/.kodiak.toml
@@ -0,0 +1,16 @@
+version = 1
+
+[approve]
+auto_approve_usernames = ["dependabot"]
+
+[merge]
+automerge_label = "automerge 🚀"
+
+[merge.message]
+include_coauthors = true
+include_pull_request_url = true
+
+[merge.automerge_dependencies]
+# auto merge all PRs opened by "dependabot" that are "minor" or "patch" version upgrades. "major" version upgrades will be ignored.
+versions = ["minor", "patch"]
+usernames = ["dependabot"]