From ef85aa2a3972de5b5456abc2ca1db4ca37d3f978 Mon Sep 17 00:00:00 2001 From: Parth Aggarwal Date: Fri, 23 Oct 2026 11:53:27 -0700 Subject: [PATCH 1/2] [MrBot] Allow autogenerated workflow pin updates Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/policies/resourceManagement.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/policies/resourceManagement.yml b/.github/policies/resourceManagement.yml index 561917c..21a9bf8 100644 --- a/.github/policies/resourceManagement.yml +++ b/.github/policies/resourceManagement.yml @@ -15,7 +15,7 @@ configuration: pattern: "[autogenerated]" isRegex: false - filesMatchPattern: - pattern: (^deps/|^build/devops_gated\.yml$) + pattern: (^deps/|^build/devops_gated\.yml$|^\.github/workflows/two-human-reviewers\.yml$) - filesMatchPattern: pattern: ^deps/ matchAny: true From 6fdb94d22ecb02c0ccaa7858bc8a868cff681d16 Mon Sep 17 00:00:00 2001 From: Parth Aggarwal Date: Fri, 23 Oct 2026 17:26:47 -0700 Subject: [PATCH 2/2] Document autogenerated PR allowlist Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/policies/resourceManagement.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/policies/resourceManagement.yml b/.github/policies/resourceManagement.yml index 21a9bf8..4773e45 100644 --- a/.github/policies/resourceManagement.yml +++ b/.github/policies/resourceManagement.yml @@ -15,6 +15,7 @@ configuration: pattern: "[autogenerated]" isRegex: false - filesMatchPattern: + # Match deps/, the c-build-tools pipeline YAML, and the two-human-reviewers workflow so autogenerated dependency PRs remain eligible for auto-approval. pattern: (^deps/|^build/devops_gated\.yml$|^\.github/workflows/two-human-reviewers\.yml$) - filesMatchPattern: pattern: ^deps/