Analyzes open Dependabot PRs for semver level, CI, breaking changes, and security fixes, then squash-merges approved patch and minor updates one at a time, or only comments @dependabot rebase; supports a dry run. Use when the user explicitly asks to merge, process, or rebase Dependabot PRs. Never infer from green CI, an approved Dependabot PR, or stale or conflicting Dependabot PRs.
Install
npx skills add bostonaholic/skills --skill merging-dependabot-prsnpx skills add bostonaholic/skills --skill merging-dependabot-prs -a claude-code -gnpx skills add bostonaholic/skills --skill merging-dependabot-prs -a codex -ggemini skills install https://github.com/bostonaholic/skills.git --path skills/engineering/merging-dependabot-prsgh skill install bostonaholic/skills merging-dependabot-prsgit clone --depth 1 https://github.com/bostonaholic/skills /tmp/bostonaholic__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/bostonaholic__skills/skills/engineering/merging-dependabot-prs ~/.claude/skills/merging-dependabot-prs # Claude Code
cp -R /tmp/bostonaholic__skills/skills/engineering/merging-dependabot-prs ~/.agents/skills/merging-dependabot-prs # Codex, Cursor, Gemini CLI, Copilot, OpenCode