[smith-xyz]

What

• Deletes .github/workflows/auto-merge.yml — the pull_request_target workflow that armed GitHub's native auto-merge (the automerge label or a ticked test checkbox) so green PRs landed without a click
• Drops the now-dead doc references

Why

Active development is cooling off and Qodo now handles code review, so the unattended-merge path is no longer worth a standing privileged trigger with a write token. Required checks still gate every merge — merging just needs a click again.

Notes

• PRs already armed keep GitHub's native auto-merge setting; disable via the PR UI if one should not land unattended
• The repo-level "Allow auto-merge" setting can be turned off separately once this merges

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: smith-xyz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [smith-xyz]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[qodo-for-traust-security]

PR Summary by Qodo

Retire the auto-merge workflow

⚙️ Configuration changes 📝 Documentation 🕐 Less than 10 minutes

---

AI Description

• Remove the privileged workflow that automatically armed eligible PRs for merging.
• Keep required CI checks; merging now requires a manual action.
• Remove the obsolete workflow reference from the contributor guide.

Diagram

graph TD
  PR["Pull Request"] --> CI["CI workflow"] --> Gate{"Checks pass?"} -->|yes| Merge["Manual merge"] --> Labeler["Review labeler"]
  Gate -->|no| Block["Merge blocked"]

Loading

High-Level Assessment

Deleting the workflow directly removes the standing privileged trigger. Disabling repository-level auto-merge alone would not remove that workflow; the setting can be turned off separately. PRs already armed for native auto-merge must be disabled individually if they should not merge unattended.

Files changed (1) +1 / -1

Documentation (1) +1 / -1

CONTRIBUTING.mdRemove obsolete auto-merge workflow reference +1/-1

Remove obsolete auto-merge workflow reference

• The CI pipeline guidance no longer describes the deleted auto-merge workflow as part of the merge-by-risk flow. It continues to document the nightly core check, post-merge review workflow, and CODEOWNERS approval.

CONTRIBUTING.md

[qodo-for-traust-security]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

---

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

---

Powered by Qodo