Review Dependabot PRs

Workflow for FMC geo React apps. Dependabot config (groups, schedule, ignores) lives in skill tech-stack — dependabot.md. This skill covers review and merge decisions.

After merge, use skill babysit only if the PR needs conflict/CI/comment follow-up on a feature branch — not for routine scheduled bumps on develop.

Repo scope

Work only in the Git repository of the current workspace. List, review, and merge Dependabot PRs for that repo — never for other repos.

Run all gh commands from the project root without --repo so GitHub CLI uses the checkout. Stop if the workspace is not a git repo or has no .github/dependabot.yml.

Typical FMC app repos target develop — never merge Dependabot PRs to main. Confirm baseRefName on each PR; use AskQuestion if it looks wrong.

Policy: one open Dependabot PR per ecosystem — merge or explicitly defer (close + ignore) before the next opens.

Review workflow

Copy and track: