Set up a workflow that runs on a schedule (daily?) that looks for open PRs created by dependabot and approves itiff it is older than X days (7?) andunless, the status:blocked label is set.
The effect of this is that we don't need to care about dependabot PRs anymore, eventually they will be auto-merged, unless there is something fishy about it, in which case we can just go and have a look, and flag it to not be merged automatically with a label.
Proposal
status:blocked
label is set.The effect of this is that we don't need to care about dependabot PRs anymore, eventually they will be auto-merged, unless there is something fishy about it, in which case we can just go and have a look, and flag it to not be merged automatically with a label.
References