Dependabot auto-merge

[Dreamsorcerer]

All remaining PRs on aiohttp-jinja2 auto-merged successfully, so looks like this is the solution.

[codecov]

Codecov Report

Merging #5932 (279f9a2) into master (a341986) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #5932   +/-   ##
=======================================
  Coverage   96.75%   96.75%           
=======================================
  Files          44       44           
  Lines        9852     9852           
  Branches     1591     1591           
=======================================
  Hits         9532     9532           
  Misses        182      182           
  Partials      138      138           

Flag	Coverage Δ
unit	96.65% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a341986...279f9a2. Read the comment docs.

[patchback]

Backport to 3.8: 💚 backport PR created

✅ Backport PR branch: patchback/backports/3.8/3a479d39c8012b842f8f1201e288252b0c9c843e/pr-5932

Backported as #5933

🤖 @patchback
I'm built with octomachinery and
my source is open — https://github.com/sanitizers/patchback-github-app.

[webknjaz]

Strictly speaking, if-clauses do not need interpolation syntax and should only contain expressions.

[Dreamsorcerer]

Tell that to Microsoft. :P
That's a verbatim copy/paste from the docs.
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request

[webknjaz]

@Dreamsorcerer this patch merges the PRs with the GH-provided token. As a result, merge commits don't produce updates and the CI doesn't run after the merge.
The consequence is that this means that the CI also doesn't upload the coverage report to Codecov. Meaning that Codecov shows a drop in coverage on each of such merges: https://app.codecov.io/gh/aio-libs/aiohttp/branch/master/commits?page=1.

[Dreamsorcerer]

OK, this suggests using a personal access token:
https://docs.github.com/en/actions/learn-github-actions/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token

[Dreamsorcerer]

Although I'm curious that those merges seem to have a pre-commit status check still run against them.