From 3600ff2a144d575d9169f07434e89127e8fd5b43 Mon Sep 17 00:00:00 2001
From: Christian Sutter <git@doublesignal.com>
Date: Tue, 7 Jan 2025 12:09:43 +0000
Subject: [PATCH] Enable external dependencies for Dependabot merger

---
 .govuk_dependabot_merger.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.govuk_dependabot_merger.yml b/.govuk_dependabot_merger.yml
index d8921d3..bc5c739 100644
--- a/.govuk_dependabot_merger.yml
+++ b/.govuk_dependabot_merger.yml
@@ -1,4 +1,11 @@
 api_version: 2
 defaults:
+  update_external_dependencies: true
   auto_merge: true
-  update_external_dependencies: false # TODO: enable after verifying that this repo meets the conditions
+  allowed_semver_bumps:
+    - patch
+    - minor
+overrides:
+  - dependency: rails
+    allowed_semver_bumps:
+      - patch