-
Notifications
You must be signed in to change notification settings - Fork 161
chore: Updated Dependabot config to group PRs and added workflow for scheduled auto-merge #549
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR adds a scheduled GitHub Actions workflow to auto-approve, rebase, and merge Dependabot PRs on the dependabotchanges branch, and refines the Dependabot configuration to group updates and limit open PRs.
- Introduces
scheduled-Dependabot-PRs-Auto-Merge.ymlfor nightly and manual Dependabot PR processing with conflict rebasing and multi-strategy merge - Updates
.github/dependabot.ymlto group dependency updates by ecosystem/path and setopen-pull-requests-limitto 10
Reviewed Changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| .github/workflows/scheduled-Dependabot-PRs-Auto-Merge.yml | Adds workflow to fetch, rebase, and auto-merge Dependabot PRs on a schedule |
| .github/dependabot.yml | Optimizes grouping and limits for Dependabot updates across multiple paths |
Comments suppressed due to low confidence (1)
.github/dependabot.yml:28
- [nitpick] The group name 'backend-deps' is reused in multiple blocks; consider using unique, more descriptive names per directory to avoid confusion.
backend-deps:
| - "*" | ||
|
|
||
| # 2. Python dependencies | ||
| # 2. Python dependencies – App |
Copilot
AI
May 23, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Replace the unexpected '�' character in the comment with a standard hyphen or dash for clarity.
| # 2. Python dependencies � App | |
| # 2. Python dependencies - App |
| patterns: | ||
| - "*" | ||
|
|
||
| # 3. Python dependencies – Azure Function |
Copilot
AI
May 23, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Replace the unexpected '�' character in this comment with a standard hyphen or dash for consistency.
| # 3. Python dependencies � Azure Function | |
| # 3. Python dependencies - Azure Function |
| contents: write | ||
| pull-requests: write | ||
|
|
||
| jobs: |
Copilot
AI
May 23, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[nitpick] This workflow contains extensive shell logic; consider extracting repeated steps into a composite action to improve readability and maintainability.
|
🎉 This PR is included in version 1.2.0 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
Purpose
Does this introduce a breaking change?
Golden Path Validation
Deployment Validation
What to Check
Verify that the following are valid
Other Information