Streamline dependabot workflow

[joelhawksley]

What are you trying to accomplish?

This PR streamlines the dependabot workflow significantly by:

1. Not requiring a changelog on gemfile.lock-only PRs, enabling them to pass CI on their own.
2. Auto-approving and auto-merging dependabot PRs.
3. Running dependabot daily.

[Copilot]

Pull request overview

This PR streamlines the dependabot workflow by exempting Gemfile.lock-only changes from changelog requirements, implementing automatic approval and merging of dependabot PRs, and increasing the update frequency from weekly to daily.

Key changes:

• Modified changelog check to skip requirement when only Gemfile.lock files are changed
• Added new workflow to automatically approve and merge dependabot PRs
• Changed dependabot schedule from weekly to daily for both root and docs directories

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File	Description
docs/CHANGELOG.md	Documents the new auto-merge functionality for dependabot PRs
.github/workflows/lint.yml	Updates changelog validation to exclude Gemfile.lock-only changes from requiring a changelog entry
.github/workflows/dependabot-auto-merge.yml	New workflow that automatically approves and enables auto-merge for dependabot PRs
.github/dependabot.yml	Increases update frequency from weekly to daily for dependency updates

Comments suppressed due to low confidence (1)

.github/workflows/dependabot-auto-merge.yml:28

• The workflow auto-merges all dependabot PRs regardless of update type (major, minor, or patch). Major version updates can introduce breaking changes that might not be caught by automated tests. Consider using the metadata from the 'Dependabot metadata' step to conditionally auto-merge only patch and minor updates, requiring manual review for major version updates. You can access the update type via 'steps.metadata.outputs.update-type'.

      - name: Enable auto-merge for Dependabot PRs
        run: gh pr merge --auto --merge "$PR_URL"
        env:
          PR_URL: ${{github.event.pull_request.html_url}}
          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.