From 92bbdd9c769bcc802a80f4f7f2c457b5ae33e635 Mon Sep 17 00:00:00 2001 From: Parth Aggarwal Date: Fri, 23 Oct 2026 11:53:31 -0700 Subject: [PATCH 1/2] [MrBot] Allow autogenerated workflow pin updates Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/policies/resourceManagement.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/policies/resourceManagement.yml b/.github/policies/resourceManagement.yml index 5503fa4..5d90f3d 100644 --- a/.github/policies/resourceManagement.yml +++ b/.github/policies/resourceManagement.yml @@ -15,7 +15,7 @@ configuration: pattern: "[autogenerated]" isRegex: false - filesMatchPattern: - pattern: (^deps/|^build/devops\.yml$) + pattern: (^deps/|^build/devops\.yml$|^\.github/workflows/two-human-reviewers\.yml$) - filesMatchPattern: pattern: ^deps/ matchAny: true From 023c9c74d93bac380ac1d6a56254803774f9d7d1 Mon Sep 17 00:00:00 2001 From: Parth Aggarwal Date: Fri, 23 Oct 2026 17:26:50 -0700 Subject: [PATCH 2/2] Document autogenerated PR allowlist Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/policies/resourceManagement.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/policies/resourceManagement.yml b/.github/policies/resourceManagement.yml index 5d90f3d..2a16aa1 100644 --- a/.github/policies/resourceManagement.yml +++ b/.github/policies/resourceManagement.yml @@ -15,6 +15,7 @@ configuration: pattern: "[autogenerated]" isRegex: false - filesMatchPattern: + # Match deps/, the c-build-tools pipeline YAML, and the two-human-reviewers workflow so autogenerated dependency PRs remain eligible for auto-approval. pattern: (^deps/|^build/devops\.yml$|^\.github/workflows/two-human-reviewers\.yml$) - filesMatchPattern: pattern: ^deps/