request-dependabot-review.yml

Request review from a configurable list of reviewers when a PR’s author matches a bot actor (Dependabot by default), so scheduled dependency bumps don’t merge without a human look.

Inputs

Input	Type	Default	Description
reviewers	string	(required)	Comma-separated GitHub usernames to request review from.
bot-actor	string	'dependabot[bot]'	Only request review when the PR author’s login matches this.

Permissions

Grant pull-requests: write (it requests a reviewer on the PR).

Example

# Copy to .github/workflows/request-dependabot-review.yml in your repo.
# NOTE: the calling job grants pull-requests:write so the workflow can
# request a review. Required because repos default to a read-only token.
name: Request Dependabot PR Review

on:
  pull_request:
    types: [opened]

jobs:
  request-review:
    permissions:
      pull-requests: write
    uses: Morrison-Lab/gha/.github/workflows/request-dependabot-review.yml@v2
    with:
      reviewers: your-github-username
      # bot-actor: renovate[bot]   # override the default (dependabot[bot])

See the examples/ directory for the full caller stub (request-dependabot-review.yml).