From 004ebc7dce6647b76227457857b54f7ca2f953a7 Mon Sep 17 00:00:00 2001
From: "talieisin-org-automation[bot]"
 <317582940+talieisin-org-automation[bot]@users.noreply.github.com>
Date: Mon, 17 Aug 2026 10:24:08 +0000
Subject: [PATCH 1/2] chore: update .github/dependabot.yml (org automation
 sync)

---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 274ae76..73206b1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,4 +1,4 @@
-# managed-by: talieisin-org-bootstrap v2
+# managed-by: talieisin-org-bootstrap v4
 version: 2
 updates:
   - package-ecosystem: "github-actions"

From dc11c0d70d65fcd015f3bd07209f0d52d0ab8c25 Mon Sep 17 00:00:00 2001
From: "talieisin-org-automation[bot]"
 <317582940+talieisin-org-automation[bot]@users.noreply.github.com>
Date: Mon, 17 Aug 2026 10:24:10 +0000
Subject: [PATCH 2/2] chore: update .github/workflows/dependabot-agent.yml (org
 automation sync)

---
 .github/workflows/dependabot-agent.yml | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dependabot-agent.yml b/.github/workflows/dependabot-agent.yml
index fdd0913..dd6c21c 100644
--- a/.github/workflows/dependabot-agent.yml
+++ b/.github/workflows/dependabot-agent.yml
@@ -1,10 +1,12 @@
-# managed-by: talieisin-org-bootstrap v2
+# managed-by: talieisin-org-bootstrap v4
 # Fires when the org dispatcher labels a major Dependabot PR `ai-upgrade`.
 # All logic lives in Talieisin/.github — see its docs/ai-automation.md.
 name: AI upgrade
 on:
   pull_request:
     types: [labeled]
+  pull_request_review:
+    types: [submitted]
 
 permissions:
   contents: read
@@ -15,15 +17,27 @@ permissions:
 
 jobs:
   upgrade:
-    if: github.event.label.name == 'ai-upgrade'
+    if: github.event_name == 'pull_request' && github.event.label.name == 'ai-upgrade'
     uses: Talieisin/.github/.github/workflows/dependabot-upgrade.yml@main
     with:
       setup: none
     secrets:
       CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
       COPILOT_REVIEW_PAT: ${{ secrets.COPILOT_REVIEW_PAT }}
+      TALIEISIN_CODEX_APP_ID: ${{ secrets.TALIEISIN_CODEX_APP_ID }}
+      TALIEISIN_CODEX_APP_PRIVATE_KEY: ${{ secrets.TALIEISIN_CODEX_APP_PRIVATE_KEY }}
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
       TALIEISIN_AUTOMATION_APP_ID: ${{ secrets.TALIEISIN_AUTOMATION_APP_ID }}
       TALIEISIN_AUTOMATION_APP_PRIVATE_KEY: ${{ secrets.TALIEISIN_AUTOMATION_APP_PRIVATE_KEY }}
       TALIEISIN_TRIGGER_APP_ID: ${{ secrets.TALIEISIN_TRIGGER_APP_ID }}
       TALIEISIN_TRIGGER_APP_PRIVATE_KEY: ${{ secrets.TALIEISIN_TRIGGER_APP_PRIVATE_KEY }}
+
+  copilot-response:
+    if: github.event_name == 'pull_request_review' && startsWith(github.event.review.user.login, 'copilot')
+    uses: Talieisin/.github/.github/workflows/copilot-response.yml@main
+    with:
+      setup: none
+    secrets:
+      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+      TALIEISIN_AUTOMATION_APP_ID: ${{ secrets.TALIEISIN_AUTOMATION_APP_ID }}
+      TALIEISIN_AUTOMATION_APP_PRIVATE_KEY: ${{ secrets.TALIEISIN_AUTOMATION_APP_PRIVATE_KEY }}