From 32ea4a20b5f41c8ce2cd2e0ad07febd782f14177 Mon Sep 17 00:00:00 2001 From: Parth Aggarwal Date: Fri, 23 Oct 2026 11:53:44 -0700 Subject: [PATCH 1/2] [MrBot] Allow autogenerated workflow pin updates Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/policies/resourceManagement.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/policies/resourceManagement.yml b/.github/policies/resourceManagement.yml index 561917cf..21a9bf82 100644 --- a/.github/policies/resourceManagement.yml +++ b/.github/policies/resourceManagement.yml @@ -15,7 +15,7 @@ configuration: pattern: "[autogenerated]" isRegex: false - filesMatchPattern: - pattern: (^deps/|^build/devops_gated\.yml$) + pattern: (^deps/|^build/devops_gated\.yml$|^\.github/workflows/two-human-reviewers\.yml$) - filesMatchPattern: pattern: ^deps/ matchAny: true From 0b0d9a421af126e4da2c8251bbd3a2bade14fd1b Mon Sep 17 00:00:00 2001 From: Parth Aggarwal Date: Fri, 23 Oct 2026 17:26:55 -0700 Subject: [PATCH 2/2] Document autogenerated PR allowlist Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/policies/resourceManagement.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/policies/resourceManagement.yml b/.github/policies/resourceManagement.yml index 21a9bf82..4773e45b 100644 --- a/.github/policies/resourceManagement.yml +++ b/.github/policies/resourceManagement.yml @@ -15,6 +15,7 @@ configuration: pattern: "[autogenerated]" isRegex: false - filesMatchPattern: + # Match deps/, the c-build-tools pipeline YAML, and the two-human-reviewers workflow so autogenerated dependency PRs remain eligible for auto-approval. pattern: (^deps/|^build/devops_gated\.yml$|^\.github/workflows/two-human-reviewers\.yml$) - filesMatchPattern: pattern: ^deps/