Review Dependabot PRs

Workflow for FMC geo React apps. Dependabot config (groups, schedule, ignores, dependabot.yml changes) lives in skill tech-stack → references/dependabot.md. This skill covers review and merge decisions.

Repo scope

Work only in the Git repository of the current workspace — never review or merge Dependabot PRs for other repos. Run gh from the project root without --repo. Stop if the workspace is not a git repo or has no .github/dependabot.yml.

Typical FMC app repos target develop — never merge Dependabot PRs to main. Confirm baseRefName on each PR; use AskUserQuestion if it looks wrong.

Policy: one open Dependabot PR per ecosystem — merge or explicitly defer (close + ignore) before the next opens.

Review workflow

1. Gather context

gh pr list --author app/dependabot --state open --json number,title,baseRefName,headRefName,labels