build(deps): bump python from 3.11 to 3.13 in the docker group across 1 directory #710

	---
	name: dependabot

	on:
	pull_request:
	branches:
	- main

	permissions:
	contents: read
	pull-requests: write

	jobs:
	dependabot:
	runs-on: ubuntu-latest
	# Checking the author will prevent your Action run failing on non-Dependabot PRs
	if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
	steps:
	- uses: actions/create-github-app-token@v1
	id: app-token
	with:
	app-id: ${{ vars.ACTIONS_APP_ID }}
	private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
	owner: ${{ github.repository_owner }}

	- name: Dependabot metadata
	id: dependabot-metadata
	uses: dependabot/fetch-metadata@v2

	- name: checkout
	uses: actions/checkout@v4
	with:
	lfs: true

	- name: Approve a PR if not already approved
	run: \|
	gh pr checkout "$PR_URL" # sets the upstream metadata for `gh pr status`
	if [ "$(gh pr status --json reviewDecision -q .currentBranch.reviewDecision)" != "APPROVED" ];
	then gh pr review --approve "$PR_URL"
	else echo "PR already approved, skipping additional approvals to minimize emails/notification noise.";
	fi
	env:
	PR_URL: ${{ github.event.pull_request.html_url }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Enable auto-merge for Dependabot PRs
	if: ${{ steps.dependabot-metadata.outputs.update-type == 'version-update:semver-minor' \|\| steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch'}}
	run: gh pr merge --auto --merge "$PR_URL"
	env:
	PR_URL: ${{ github.event.pull_request.html_url }}
	GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}

Provide feedback