[dschach]

Summary

The Dependabot workflow template now calls the x2od reusable Dependabot workflow 1 time, in 1 job, for all 3 dependency types. This matches the dependabot-update.yml callers that are now in the x2od and dschach repositories.

Changes

File	Change
workflow-templates/dependabot-approve-and-auto-merge.yml	Replaces the 3 jobs (production, development, and indirect) with 1 dependabot job that uses the per-type inputs autoapprove-<type> and automerge-<type>. The comments now match the installed callers. The settings checklist stays.
README.md	Updates the template's row in the "Workflow templates" table. Prettier realigned the table.

Behavior changes

• New rules for repositories that start from this template: approve and merge minor, patch, and security updates for all 3 dependency types. Major updates that are not security fixes need a manual review. The old template approved and merged all updates, including major.
• 1 runner per Dependabot PR instead of 3, and 1 job summary instead of 3.
• The workflow name is now Dependabot PR Update.
• The token secret stays DEPENDABOT_TOKEN_X2OD, the name that the x2od organization uses. The installed callers use DEPENDABOT_TOKEN.
• Existing repositories are not affected. A template is copied only when someone creates a new workflow from it.

Test

• npx prettier --check passes for both files.
• The YAML parses, and it has 1 job with the 6 per-type inputs.
• Apart from comments and the secret name, the code is the same as .github/workflows/dependabot-update.yml in this repository.