diff --git a/.agents/pm/history/pm-rust-p9bu.jsonl b/.agents/pm/history/pm-rust-p9bu.jsonl
new file mode 100644
index 0000000..1654423
--- /dev/null
+++ b/.agents/pm/history/pm-rust-p9bu.jsonl
@@ -0,0 +1,7 @@
+{"hash_algorithm":"sha256","ts":"2026-10-04T16:55:38.748Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"create","patch":[{"op":"replace","path":"/body","value":"Fleet-wide automation of version bumps; see companion pm-cli-website-6d05."},{"op":"add","path":"/metadata/id","value":"pm-rust-p9bu"},{"op":"add","path":"/metadata/title","value":"Auto-merge green Dependabot updates and group the pm toolchain into one daily PR"},{"op":"add","path":"/metadata/description","value":"Version bumps of the pm CLI, SDK-bearing packages and fleet gates are mechanical and must land without a hand-written certification PR. Dependabot checks npm daily, groups @unbrained/pm-cli and pm-* packages into one pm-toolchain PR and other minor/patch updates into one dependencies PR; a least-privilege workflow enables GitHub squash auto-merge for every non-major Dependabot PR so it merges as soon as the required checks pass. A failing bump is a real defect to fix. Fleet rule: companion pm-cli-website-6d05; pilot unbraind/pm-presets#118."},{"op":"add","path":"/metadata/type","value":"Task"},{"op":"add","path":"/metadata/status","value":"open"},{"op":"add","path":"/metadata/priority","value":2},{"op":"add","path":"/metadata/tags","value":["automation","ci","dependencies"]},{"op":"add","path":"/metadata/created_at","value":"2026-10-04T16:55:38.748Z"},{"op":"add","path":"/metadata/updated_at","value":"2026-10-04T16:55:38.748Z"},{"op":"add","path":"/metadata/deadline","value":"2026-10-06T00:00:00.000Z"},{"op":"add","path":"/metadata/assignee","value":"claude-orchestrator"},{"op":"add","path":"/metadata/author","value":"claude-orchestrator"},{"op":"add","path":"/metadata/estimated_minutes","value":15},{"op":"add","path":"/metadata/acceptance_criteria","value":"dependabot.yml checks npm daily with pm-toolchain and dependencies groups; dependabot-auto-merge.yml enables squash auto-merge only for Dependabot non-major updates with least-privilege permissions; repository allows auto-merge; required checks still gate every merge"},{"op":"add","path":"/metadata/comments","value":[{"created_at":"2026-10-04T16:55:38.748Z","author":"claude-orchestrator","text":"Rolled out from the reviewed pilot unbraind/pm-presets#118."}]},{"op":"add","path":"/metadata/files","value":[{"path":".github/dependabot.yml","scope":"project"},{"path":".github/workflows/dependabot-auto-merge.yml","scope":"project"}]},{"op":"add","path":"/metadata/docs","value":[{"path":".github/workflows/dependabot-auto-merge.yml","scope":"project"}]}],"before_hash":"3cc22dff72be7b14824654a7a64ea62b04799939b2fee54c1b5f52ca60bf6df0","after_hash":"0fd4430ab6cc9120ea5b81b8c99c8207f4732cfbd84aabaaaac80cd80e6e6dff","item_hash_version":3,"message":"Create item for Dependabot auto-merge | explicit_unset=dependencies,learnings,notes,tests","context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"d104fc250d04d0ca971e74222d7c2afc703fc1af594c2dd45017aa8ec72caa41"}
+{"hash_algorithm":"sha256","ts":"2026-10-04T16:55:39.683Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"claim","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T16:55:39.683Z"},{"op":"add","path":"/metadata/claim_principal","value":"claude-orchestrator"}],"before_hash":"0fd4430ab6cc9120ea5b81b8c99c8207f4732cfbd84aabaaaac80cd80e6e6dff","after_hash":"d29232b22d1525f2b7087f4fae5396487ef9a6dc9d8b8c23655db36f3b8bf7a0","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"7046226683f01da13204f83441611f90157938f83c8f36bd861183d1d5fb8941"}
+{"hash_algorithm":"sha256","ts":"2026-10-04T16:55:40.248Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"update","patch":[{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T16:55:40.248Z"},{"op":"replace","path":"/metadata/status","value":"in_progress"}],"before_hash":"d29232b22d1525f2b7087f4fae5396487ef9a6dc9d8b8c23655db36f3b8bf7a0","after_hash":"766969afe53d2fd479c92b345a7c4664000abbb75bbe7430484d0f17f904e7db","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"ced5385b19b66c2dbb866770c2ed36bf1965e3c1041066f60d2f4573b545967a"}
+{"hash_algorithm":"sha256","ts":"2026-10-04T16:58:38.356Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"close","patch":[{"op":"remove","path":"/metadata/assignee"},{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T16:58:38.356Z"},{"op":"replace","path":"/metadata/status","value":"closed"},{"op":"add","path":"/metadata/closed_at","value":"2026-10-04T16:58:38.258Z"},{"op":"add","path":"/metadata/completed_at","value":"2026-10-04T16:58:38.258Z"},{"op":"add","path":"/metadata/close_reason","value":"Rolled out the reviewed pilot (unbraind/pm-presets#118, auto-merge proven on pm-presets#119, groups made disjoint in pm-presets#120). This PR's required checks gate the merge; repository auto-merge and branch deletion enabled."}],"before_hash":"766969afe53d2fd479c92b345a7c4664000abbb75bbe7430484d0f17f904e7db","after_hash":"5877b56cd8f3454315970659a4afe9d784704f6b05f6244fb4d7b68947e0c364","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"ac224621c44d10bfd9cec5b3fba61f3ab8c36a7eeee1d47259dfa133b35e82e2"}
+{"hash_algorithm":"sha256","ts":"2026-10-04T16:58:44.684Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"release","patch":[{"op":"remove","path":"/metadata/claim_principal"},{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T16:58:44.684Z"}],"before_hash":"5877b56cd8f3454315970659a4afe9d784704f6b05f6244fb4d7b68947e0c364","after_hash":"5661362dba193d590bf406b2267e7326115a9f715f31954bd3f46fedf93eb950","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"maintenance","record_hash_version":1,"record_hash":"3de795c50eab9cf8ed981237e7a68b79d4ba8bccc611b6fa990af28c6e4618c1"}
+{"hash_algorithm":"sha256","ts":"2026-10-04T17:20:34.977Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":{"value":"implementer","source":"argv"},"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"update","patch":[{"op":"replace","path":"/metadata/acceptance_criteria","value":"dependabot.yml keeps Cargo and GitHub Actions daily (no npm ecosystem here); dependabot-auto-merge.yml enables squash auto-merge only for Dependabot updates classified minor or patch (plus the calendar-versioned pm-toolchain npm group, absent here), with documented least-privilege permissions; repository allows auto-merge; required checks still gate every merge"},{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T17:20:34.977Z"}],"before_hash":"5661362dba193d590bf406b2267e7326115a9f715f31954bd3f46fedf93eb950","after_hash":"5edaae8df89d95729435e5384390533b18d61fa47ca77135361c5b6ae23cda6e","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"a181aeadaa7f6bbf0cb430f97eda80d094f467dc88c33cac5f53b50bcfd2f9fc"}
+{"hash_algorithm":"sha256","ts":"2026-10-04T17:20:41.268Z","author":"claude-orchestrator","author_source":"asserted","agent_harness":"claude-code","agent_model":"claude-opus-5-5","agent_model_source":"probe","agent_instance":"4b273145923a68729ab394ab","agent_provenance":{"model":{"value":"claude-opus-5-5","source":"probe"},"effort":{"value":"high","source":"environment"},"role":null,"topic":null,"version":{"value":"2.1.289","source":"probe"}},"op":"comment_add","patch":[{"op":"add","path":"/metadata/comments/1","value":{"created_at":"2026-10-04T17:20:41.268Z","author":"claude-orchestrator","text":"Review round 2 (Greptile/CodeRabbit across the fleet rollout): explicit minor/patch allow-list so an unclassified update never auto-merges; documented why the job needs write permissions; explicit patterns for the dependencies group; acceptance criteria now name the pm-toolchain calendar-version exception. Refused: switching to pull_request_target (GitHub keeps Dependabot-authored runs read-only there too; the pull_request + permissions pattern is proven by pm-presets#119) and removing the pm-toolchain exception (owner rule pm-cli-website-6d05: pm bumps land unattended; required checks gate them)."}},{"op":"replace","path":"/metadata/updated_at","value":"2026-10-04T17:20:41.268Z"}],"before_hash":"5edaae8df89d95729435e5384390533b18d61fa47ca77135361c5b6ae23cda6e","after_hash":"5060476acd28432338eff8ef494745e47069151faad8b07367ef3679d995a31e","item_hash_version":3,"context":{"agent_provenance_outcomes":{"model":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"},"version":{"status":"resolved","resolver":"claude_session_file","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"b11f13e35d1b62ecbbb35f9ab46e350ebf24c39a4805dcdcca3dec5345826ea5"}
diff --git a/.agents/pm/tasks/pm-rust-p9bu.toon b/.agents/pm/tasks/pm-rust-p9bu.toon
new file mode 100644
index 0000000..3301ed9
--- /dev/null
+++ b/.agents/pm/tasks/pm-rust-p9bu.toon
@@ -0,0 +1,25 @@
+id: pm-rust-p9bu
+title: Auto-merge green Dependabot updates and group the pm toolchain into one daily PR
+description: "Version bumps of the pm CLI, SDK-bearing packages and fleet gates are mechanical and must land without a hand-written certification PR. Dependabot checks npm daily, groups @unbrained/pm-cli and pm-* packages into one pm-toolchain PR and other minor/patch updates into one dependencies PR; a least-privilege workflow enables GitHub squash auto-merge for every non-major Dependabot PR so it merges as soon as the required checks pass. A failing bump is a real defect to fix. Fleet rule: companion pm-cli-website-6d05; pilot unbraind/pm-presets#118."
+type: Task
+status: closed
+priority: 2
+tags[3]: automation,ci,dependencies
+created_at: "2026-10-04T16:55:38.748Z"
+updated_at: "2026-10-04T17:20:41.268Z"
+deadline: "2026-10-06T00:00:00.000Z"
+closed_at: "2026-10-04T16:58:38.258Z"
+completed_at: "2026-10-04T16:58:38.258Z"
+author: claude-orchestrator
+estimated_minutes: 15
+acceptance_criteria: "dependabot.yml keeps Cargo and GitHub Actions daily (no npm ecosystem here); dependabot-auto-merge.yml enables squash auto-merge only for Dependabot updates classified minor or patch (plus the calendar-versioned pm-toolchain npm group, absent here), with documented least-privilege permissions; repository allows auto-merge; required checks still gate every merge"
+comments[2]{created_at,author,text}:
+  "2026-10-04T16:55:38.748Z",claude-orchestrator,Rolled out from the reviewed pilot unbraind/pm-presets#118.
+  "2026-10-04T17:20:41.268Z",claude-orchestrator,"Review round 2 (Greptile/CodeRabbit across the fleet rollout): explicit minor/patch allow-list so an unclassified update never auto-merges; documented why the job needs write permissions; explicit patterns for the dependencies group; acceptance criteria now name the pm-toolchain calendar-version exception. Refused: switching to pull_request_target (GitHub keeps Dependabot-authored runs read-only there too; the pull_request + permissions pattern is proven by pm-presets#119) and removing the pm-toolchain exception (owner rule pm-cli-website-6d05: pm bumps land unattended; required checks gate them)."
+files[2]{path,scope}:
+  .github/dependabot.yml,project
+  .github/workflows/dependabot-auto-merge.yml,project
+docs[1]{path,scope}:
+  .github/workflows/dependabot-auto-merge.yml,project
+close_reason: "Rolled out the reviewed pilot (unbraind/pm-presets#118, auto-merge proven on pm-presets#119, groups made disjoint in pm-presets#120). This PR's required checks gate the merge; repository auto-merge and branch deletion enabled."
+body: Fleet-wide automation of version bumps; see companion pm-cli-website-6d05.
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
new file mode 100644
index 0000000..85d4c77
--- /dev/null
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -0,0 +1,33 @@
+name: dependabot-auto-merge
+
+# Version bumps are mechanical: every non-major Dependabot pull request gets
+# GitHub auto-merge, so it lands the moment the required checks pass. Branch
+# protection still gates the merge; a failing bump stays open as a defect.
+on: pull_request
+
+permissions: {}
+
+jobs:
+  enable-auto-merge:
+    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository_owner == 'unbraind'
+    runs-on: ubuntu-latest
+    # `gh pr merge --auto` needs pull-requests: write to enable auto-merge
+    # and contents: write for the squash merge GitHub performs once the
+    # required checks pass. Nothing is checked out or executed from the PR.
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - id: metadata
+        uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
+      # pm-toolchain is calendar-versioned (a new year reads as semver-major),
+      # so it always auto-merges. Anything else must be classified minor or
+      # patch; a major or unclassified update waits for a person.
+      - if: >-
+          steps.metadata.outputs.dependency-group == 'pm-toolchain' ||
+          steps.metadata.outputs.update-type == 'version-update:semver-minor' ||
+          steps.metadata.outputs.update-type == 'version-update:semver-patch'
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index db47447..27ea3eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -43,6 +43,7 @@
 
 ### Other
 
+- Auto-merge green Dependabot updates and group the pm toolchain into one daily PR ([pm-rust-p9bu](https://github.com/unbraind/pm-rust/blob/main/.agents/pm/tasks/pm-rust-p9bu.toon)) _type:Task; status:closed; P2_
 - Certify pm CLI 2026.9.17 ([pm-rust-6bwi](https://github.com/unbraind/pm-rust/blob/main/.agents/pm/chores/pm-rust-6bwi.toon)) _type:Chore; status:closed; P1_
 - Release two re-claimed tasks and assert legacy-journal recovery succeeds ([pm-rust-x1u8](https://github.com/unbraind/pm-rust/blob/main/.agents/pm/tasks/pm-rust-x1u8.toon)) _type:Task; status:closed; P2_
 - Live differential conformance suite against the published Node pm CLI ([pm-rust-2di7](https://github.com/unbraind/pm-rust/blob/main/.agents/pm/tasks/pm-rust-2di7.toon)) _type:Task; status:closed; P2_