Review first

.github/workflows/automerge.yml

@@ -18,7 +18,6 @@ jobs:
         run: echo "${RELEASE_TOKEN}" | gh auth login --with-token
       - name: Enable auto-merge for Dependabot PRs
         run: |
-          gh pr merge --auto --squash "${PR_URL}"
           # Checking the PR title is a poor substitute for the actual PR changes
           # but as long as this is used only with dependabot PRs,
           # it should be safe to assume that the title is not misleading.
@@ -28,6 +27,7 @@ jobs:
           else
             echo 'Non-semver upgrade needs manual review'
           fi
+          gh pr merge --auto --squash "${PR_URL}"
         env:
           PR_TITLE: ${{github.event.pull_request.title}}
           PR_URL: ${{github.event.pull_request.html_url}}