Repository navigation
chore(ci): stop dependabot re-drifting the generated examples-smoke.yml - #603
Merged
Merged
Conversation
examples-smoke.yml is generated from templates/workflows/ (which dependabot does not scan) yet lives in .github/workflows/ (which it does) — so a major action bump (setup-node v6 -> v7) lands only on the generated file and fails examples:smoke:check. Dependabot has no per-file ignore, so mirror the existing npm policy and ignore github-actions major bumps; the generator already marks the file "GENERATED FILE — do not edit by hand". Also regenerate the file to clear the current v7 drift. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01K6CmYRXTZQYs4MNo6AETxT
Contributor
|
Standing release PR: #595 · v0.41.2 queued (4 packages) · open 4h 56m · ✅ ready to merge Release Preview — v0.41.1 → v0.41.2
These changes will be added to the release PR (#595) when merged: Changelogmonorepo 0.41.1 → 0.41.2
After merge — predicted release
Updated automatically by ReleaseKit |
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Durable fix for the
examples:smoke:checkdrift that was failing CI (raised on #598).The drift mechanism
examples-smoke.ymlis generated fromtemplates/workflows/byscripts/examples-smoke/generate-smoke-workflow.ts. Dependabot scans.github/workflows/(where the generated file lives) but nottemplates/workflows/(its source). So a major action bump —actions/setup-node@v6 → @v7— landed on the generated file only, drifting it out of sync with its@v6source →examples:smoke:checkfailed on every PR.Fix
dependabot.yml, mirroring the policy the npm ecosystem already uses in the same file. The actions are major-tag-pinned (@v6,@v4, …), so this fully stops the drift while still allowing the manual major bumps the repo already does by review. (Dependabot has no per-file ignore, so this is the consistent equivalent.)examples-smoke.ymlto clear the current@v7drift sosmoke:checkpasses now.The generator already emits a
# GENERATED FILE — do not edit by hand.banner, so the human/agent signal is in place; this stops the bot from editing it.Note
#598's branch carries an interim regen of the same file to unblock its own CI; once this lands on
main, that commit reconciles cleanly (same content).🤖 Generated with Claude Code
Greptile Summary
This PR prevents Dependabot from changing generated smoke workflows independently of their sources. The main changes are:
actions/setup-nodereferences fromv7tov6.Confidence Score: 5/5
This looks safe to merge.
Important Files Changed
Reviews (1): Last reviewed commit: "chore(ci): stop dependabot re-drifting t..." | Re-trigger Greptile