From 60e30b62d77caaea6df2f48de75c5069d97789cb Mon Sep 17 00:00:00 2001 From: Parth Aggarwal Date: Fri, 23 Oct 2026 11:53:54 -0700 Subject: [PATCH 1/2] [MrBot] Allow autogenerated workflow pin updates Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/policies/resourceManagement.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/policies/resourceManagement.yml b/.github/policies/resourceManagement.yml index 561917c..21a9bf8 100644 --- a/.github/policies/resourceManagement.yml +++ b/.github/policies/resourceManagement.yml @@ -15,7 +15,7 @@ configuration: pattern: "[autogenerated]" isRegex: false - filesMatchPattern: - pattern: (^deps/|^build/devops_gated\.yml$) + pattern: (^deps/|^build/devops_gated\.yml$|^\.github/workflows/two-human-reviewers\.yml$) - filesMatchPattern: pattern: ^deps/ matchAny: true From a89dd3da97a7670c8531ffc9ecc0a76c18e96b5c Mon Sep 17 00:00:00 2001 From: Parth Aggarwal Date: Fri, 23 Oct 2026 17:27:00 -0700 Subject: [PATCH 2/2] Document autogenerated PR allowlist Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/policies/resourceManagement.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/policies/resourceManagement.yml b/.github/policies/resourceManagement.yml index 21a9bf8..4773e45 100644 --- a/.github/policies/resourceManagement.yml +++ b/.github/policies/resourceManagement.yml @@ -15,6 +15,7 @@ configuration: pattern: "[autogenerated]" isRegex: false - filesMatchPattern: + # Match deps/, the c-build-tools pipeline YAML, and the two-human-reviewers workflow so autogenerated dependency PRs remain eligible for auto-approval. pattern: (^deps/|^build/devops_gated\.yml$|^\.github/workflows/two-human-reviewers\.yml$) - filesMatchPattern: pattern: ^deps/