ci: let Dependabot PRs auto-merge when CodeQL is neutral

[dprevost-LMI]

The auto-merge job accepted only success and skipped checks, but the CodeQL check always ends as neutral. So the job always failed, also when all tests passed (for example #1262), and every Dependabot PR was merged by hand. Allow neutral, which is not a failure; canceled or failed checks still block the auto-merge.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3c8fa42

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[greptile-apps]

Confidence Score: 5/5

[High risk] Changes CI auto-merge rules for dependency updates.

The PR appears safe to merge; no actionable issues were found.

Summary

Allows Dependabot auto-merge to proceed when a check finishes as neutral.

• Keeps success and skipped allowed.
• Keeps failed and canceled checks outside allowed-conclusions.
• Leaves the existing npm and non-major update limits unchanged.
• No actionable issues found.

_{Reviews (1) · Last reviewed commit: "ci: let Dependabot PRs auto-merge when C..." · Reviewed by Greptile}