chore(workflows): Enable auto-merge for minor upgrades.

[vicary]

What did you implement:

Auto approve and merge a PR if,

1. Tests are all green
2. It's from dependabot
3. It's not a major upgrade

How did you implement it:

IDK, Github Copilot did 80% of the work, the rest is me confirming it from Google.

How can we verify it:

Made a repo to test, dependabot triggers at most daily so validation may take days.

Todos:

• Write tests
• Write documentation
• Fix linting errors
• Make sure code coverage hasn't dropped
• Provide verification config / commands / resources
• Enable "Allow edits from maintainers" for this PR
• Update the messages below

Is this ready for review?: YES
Is it a breaking change?: NO

[vicary]

So by the look of it, dependabot/fetch-metadata only returns update-type for the first time it creates a PR.

1. Reopening a PR does not provide such information
   Bump jsoneditor from 9.0.0 to 9.5.6 vicary/test-dependabot#2
2. But when dependabot creates it all by itself, the information is available
   Bump jsoneditor from 9.0.0 to 9.5.7 vicary/test-dependabot#3

Also, it is not possible to approve AFTER tests are passing. github.event.workflow_run.conclusion == 'success' only skips the whole workflow. All it can do is to approve and enable auto-merge, failing tests will prevent the auto-merge so it is doing all the guarding for minor and patch updates.

If we trust the GitHub Advisory Database, this reduces chore maintenance to a very low level.

[j0k3r]

Let's to it then!