Repository navigation
chore: prefix Dependabot commits with fix - #61
aryanjasala wants to merge 2 commits into
Conversation
Action pins in the reusable workflows run in callers' CI, so a bump reaches them only through a release. feat made every weekly bump a minor release and put it under Added; fix makes it a patch under Fixed. A major bump that raises a requirement can still be retitled to feat before merging.
There was a problem hiding this comment.
Warning
Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.
Copilot review overview
1 open issue
What changed in this PR
Updates Dependabot’s commit message prefix so dependency pin bumps are released as patches (and categorized under “Fixed”) instead of triggering minor releases under “Added”.
Changes:
- Switch Dependabot commit prefix from
feattofix - Add inline guidance on when to retitle a bump to
feat(requirement-raising changes)
| File | Description |
|---|---|
| .github/dependabot.yml | Changes Dependabot commit prefix to fix and documents when to retitle to feat to control release-please versioning/categories |
Review effort: Lite
The Dependabot comment now points at release-please-config.json for how a fix commit is released, rather than stating it as a general rule.
There was a problem hiding this comment.
Warning
Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.
Copilot review overview
1 open issue
1 resolved since last review
Review effort: Lite
| # Action pins run in callers' CI, so a bump reaches them only through a release. release-please | ||
| # (release-please-config.json) bumps the patch version for fix and lists it under Fixed. |
What this PR does
Changes the Dependabot commit prefix from
feattofix. Action pins in the reusable workflows run in callers' CI, so a bump only reaches them through a release; with release-please,featmade every weekly bump a minor release listed under Added.fixmakes it a patch listed under Fixed.Closes
N/A
Changes
.github/dependabot.yml:prefix: 'fix', with a comment on when to retitle a bump tofeat.How I verified
yamllintpasses.Reviewer notes
feat(deps)titles on purpose: they need actions/runner 2.327.1 or newer for Node 24, a requirement callers should see as a minor release. rtCamp's ARC runners are on 2.338.2. Only bumps opened after this merges getfix.