Repository navigation
ci: stop the Policy check from permanently failing Dependabot pull requests - #45
Merged
Merged
Conversation
…quests The naming policy exempted Dependabot from the branch-name rule but still applied the Conventional Commit title rule to it. Dependabot titles its own pull requests "Bump ...", so every dependency update failed a check README.md lists as required for main and could never be merged. Ask Dependabot for a Conventional Commit prefix in dependabot.yml so future pull requests satisfy the rule on their own, and skip the naming policy for Dependabot branches so the pull requests it has already opened are not blocked by titles it will not rewrite. The signing-credential check still runs for those branches. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
Policyexempts Dependabot from the branch-name rule but still enforces the Conventional Commit title rule. Dependabot titles its own PRsBump the github-actions group ..., which can never match — so every dependency PR fails a check README.md lists as required formain. PR #44 is failing this way right now.What changed
dependabot.ymlnow requests abuildcommit-message prefix, so future Dependabot PRs are titled conventionally on their own.Policyskips the naming rules fordependabot/*branches, since PRs opened before that setting landed keep their old titles and would stay blocked forever. The signing-credential check still runs for those branches.Verified locally against the extracted step script:
dependabot/github_actions/xBump the github-actions group ...ci/release-apk-assetci: attach the APKbadbranchci: xci/okBump stuff🤖 Generated with Claude Code