From b0a19f903ab93d6b61ddc84b7704cc3bce88c0f3 Mon Sep 17 00:00:00 2001
From: "talieisin-org-automation[bot]"
 <317582940+talieisin-org-automation[bot]@users.noreply.github.com>
Date: Sun, 16 Aug 2026 16:23:09 +0000
Subject: [PATCH 1/5] chore: add .github/dependabot.yml (org automation sync)

---
 .github/dependabot.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..f442abe
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,16 @@
+# managed-by: talieisin-org-bootstrap v1
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    groups:
+      minor-and-patch:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["minor", "patch"]
+      security:
+        applies-to: security-updates
+        patterns: ["*"]

From b8facc664b406df84562f2c9eb1576f1355e4419 Mon Sep 17 00:00:00 2001
From: "talieisin-org-automation[bot]"
 <317582940+talieisin-org-automation[bot]@users.noreply.github.com>
Date: Sun, 16 Aug 2026 16:23:10 +0000
Subject: [PATCH 2/5] chore: add .github/workflows/auto-merge.yml (org
 automation sync)

---
 .github/workflows/auto-merge.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 .github/workflows/auto-merge.yml

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
new file mode 100644
index 0000000..f1ee0bf
--- /dev/null
+++ b/.github/workflows/auto-merge.yml
@@ -0,0 +1,13 @@
+# managed-by: talieisin-org-bootstrap v1
+name: Auto-merge
+on: pull_request
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge:
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    uses: Talieisin/.github/.github/workflows/auto-merge.yml@main
+    secrets: inherit

From db5cab4acc907937f19041ff271c84f1907decbb Mon Sep 17 00:00:00 2001
From: "talieisin-org-automation[bot]"
 <317582940+talieisin-org-automation[bot]@users.noreply.github.com>
Date: Sun, 16 Aug 2026 16:23:11 +0000
Subject: [PATCH 3/5] chore: add .github/workflows/dependabot-agent.yml (org
 automation sync)

---
 .github/workflows/dependabot-agent.yml | 28 ++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 .github/workflows/dependabot-agent.yml

diff --git a/.github/workflows/dependabot-agent.yml b/.github/workflows/dependabot-agent.yml
new file mode 100644
index 0000000..c74b439
--- /dev/null
+++ b/.github/workflows/dependabot-agent.yml
@@ -0,0 +1,28 @@
+# managed-by: talieisin-org-bootstrap v1
+# Fires when the org dispatcher labels a major Dependabot PR `ai-upgrade`.
+# All logic lives in Talieisin/.github — see its docs/ai-automation.md.
+name: AI upgrade
+on:
+  pull_request:
+    types: [labeled]
+
+permissions:
+  contents: read
+  pull-requests: write
+  checks: read
+  issues: write
+  actions: read
+
+jobs:
+  upgrade:
+    if: github.event.label.name == 'ai-upgrade'
+    uses: Talieisin/.github/.github/workflows/dependabot-upgrade.yml@main
+    with:
+      setup: none
+    secrets:
+      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+      OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+      TALIEISIN_AUTOMATION_APP_ID: ${{ secrets.TALIEISIN_AUTOMATION_APP_ID }}
+      TALIEISIN_AUTOMATION_APP_PRIVATE_KEY: ${{ secrets.TALIEISIN_AUTOMATION_APP_PRIVATE_KEY }}
+      TALIEISIN_TRIGGER_APP_ID: ${{ secrets.TALIEISIN_TRIGGER_APP_ID }}
+      TALIEISIN_TRIGGER_APP_PRIVATE_KEY: ${{ secrets.TALIEISIN_TRIGGER_APP_PRIVATE_KEY }}

From 257027a8c06f96b198995a35964293d591e4947e Mon Sep 17 00:00:00 2001
From: "talieisin-org-automation[bot]"
 <317582940+talieisin-org-automation[bot]@users.noreply.github.com>
Date: Mon, 17 Aug 2026 03:12:32 +0000
Subject: [PATCH 4/5] chore: add .github/dependabot.yml (org automation sync)

---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f442abe..274ae76 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,4 +1,4 @@
-# managed-by: talieisin-org-bootstrap v1
+# managed-by: talieisin-org-bootstrap v2
 version: 2
 updates:
   - package-ecosystem: "github-actions"

From 730e3d9805142c47c3a21c2e1bdbcca8a47a0537 Mon Sep 17 00:00:00 2001
From: "talieisin-org-automation[bot]"
 <317582940+talieisin-org-automation[bot]@users.noreply.github.com>
Date: Mon, 17 Aug 2026 03:12:34 +0000
Subject: [PATCH 5/5] chore: add .github/workflows/dependabot-agent.yml (org
 automation sync)

---
 .github/workflows/dependabot-agent.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/dependabot-agent.yml b/.github/workflows/dependabot-agent.yml
index c74b439..fdd0913 100644
--- a/.github/workflows/dependabot-agent.yml
+++ b/.github/workflows/dependabot-agent.yml
@@ -1,4 +1,4 @@
-# managed-by: talieisin-org-bootstrap v1
+# managed-by: talieisin-org-bootstrap v2
 # Fires when the org dispatcher labels a major Dependabot PR `ai-upgrade`.
 # All logic lives in Talieisin/.github — see its docs/ai-automation.md.
 name: AI upgrade
@@ -21,6 +21,7 @@ jobs:
       setup: none
     secrets:
       CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+      COPILOT_REVIEW_PAT: ${{ secrets.COPILOT_REVIEW_PAT }}
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
       TALIEISIN_AUTOMATION_APP_ID: ${{ secrets.TALIEISIN_AUTOMATION_APP_ID }}
       TALIEISIN_AUTOMATION_APP_PRIVATE_KEY: ${{ secrets.TALIEISIN_AUTOMATION_APP_PRIVATE_KEY }}