Skip to content

Enhance Dependabot configuration for GitHub Actions and npm - #473

Merged
nev21 merged 5 commits into
mainfrom
nev21/dependabot
Nov 30, 2025
Merged

nev21 merged 5 commits into
mainfrom
nev21/dependabot

Conversation

@nev21

@nev21 nev21 commented Nov 30, 2025

Copy link
Copy Markdown
Contributor

Added configuration options for open pull requests limit, target branch, and rebase strategy for GitHub Actions and npm.

Added configuration options for open pull requests limit, target branch, and rebase strategy for GitHub Actions and npm.
Copilot AI review requested due to automatic review settings November 30, 2025 20:23
@nev21
nev21 requested a review from a team as a code owner November 30, 2025 20:23
@nev21
nev21 enabled auto-merge (squash) November 30, 2025 20:24

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR enhances the Dependabot configuration by adding explicit settings for pull request management and update strategies across all three package ecosystems (GitHub Actions and two npm directories). The changes aim to provide more control over Dependabot's behavior, though some of the added configurations use default values.

  • Added open-pull-requests-limit: 5 to control concurrent PR limits
  • Added target-branch: "main" to explicitly specify the target branch
  • Added rebase-strategy: "auto" to define the rebase behavior

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/dependabot.yml
schedule:
interval: "weekly"
open-pull-requests-limit: 5
target-branch: "main"

Copilot AI Nov 30, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] The target-branch: "main" configuration is redundant. Dependabot targets the repository's default branch automatically, and unless you need to target a different branch, this line can be removed to keep the configuration cleaner.

Copilot uses AI. Check for mistakes.
Comment thread .github/dependabot.yml
interval: "weekly"
open-pull-requests-limit: 5
target-branch: "main"
rebase-strategy: "auto"

Copilot AI Nov 30, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] The rebase-strategy: "auto" is redundant as "auto" is the default rebase strategy for Dependabot. This line can be removed unless you specifically need to document this behavior.

Copilot uses AI. Check for mistakes.
Comment thread .github/dependabot.yml
schedule:
interval: "daily"
open-pull-requests-limit: 5
target-branch: "main"

Copilot AI Nov 30, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] The target-branch: "main" configuration is redundant. Dependabot targets the repository's default branch automatically, and unless you need to target a different branch, this line can be removed to keep the configuration cleaner.

Copilot uses AI. Check for mistakes.
Comment thread .github/dependabot.yml
interval: "daily"
open-pull-requests-limit: 5
target-branch: "main"
rebase-strategy: "auto"

Copilot AI Nov 30, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] The rebase-strategy: "auto" is redundant as "auto" is the default rebase strategy for Dependabot. This line can be removed unless you specifically need to document this behavior.

Copilot uses AI. Check for mistakes.
Comment thread .github/dependabot.yml
schedule:
interval: "daily"
open-pull-requests-limit: 5
target-branch: "main"

Copilot AI Nov 30, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] The target-branch: "main" configuration is redundant. Dependabot targets the repository's default branch automatically, and unless you need to target a different branch, this line can be removed to keep the configuration cleaner.

Copilot uses AI. Check for mistakes.
Comment thread .github/dependabot.yml
interval: "daily"
open-pull-requests-limit: 5
target-branch: "main"
rebase-strategy: "auto"

Copilot AI Nov 30, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] The rebase-strategy: "auto" is redundant as "auto" is the default rebase strategy for Dependabot. This line can be removed unless you specifically need to document this behavior.

Copilot uses AI. Check for mistakes.
@codecov

codecov Bot commented Nov 30, 2025 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.89%. Comparing base (662e3e8) to head (8a0781c).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #473   +/-   ##
=======================================
  Coverage   98.89%   98.89%           
=======================================
  Files         108      108           
  Lines        2981     2981           
  Branches      621      621           
=======================================
  Hits         2948     2948           
  Misses         33       33           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@nev21
nev21 disabled auto-merge November 30, 2025 22:30
@nev21
nev21 merged commit 8274fb1 into main Nov 30, 2025
10 checks passed
@nev21
nev21 deleted the nev21/dependabot branch November 30, 2025 22:30
@nev21 nev21 added this to the 0.12.6 milestone Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants