Skip to content

fix: add conventional commit prefix to Dependabot config#81

Merged
BKDDFS merged 1 commit intodevfrom
fix/dependabot-pr-titles
Feb 9, 2026
Merged

fix: add conventional commit prefix to Dependabot config#81
BKDDFS merged 1 commit intodevfrom
fix/dependabot-pr-titles

Conversation

@BKDDFS
Copy link
Owner

@BKDDFS BKDDFS commented Feb 9, 2026

Summary

  • Dependabot PRs fail the amannn/action-semantic-pull-request check because their titles (e.g. "Bump ty from 0.0.14 to 0.0.15") don't follow conventional commits format
  • Added commit-message: prefix: "build" to both package ecosystem entries in dependabot.yml
  • New Dependabot PRs will have titles like build: bump ty from 0.0.14 to 0.0.15

Test plan

  • Verify dependabot.yml syntax is valid
  • After merge, next Dependabot PR should have build: prefixed title and pass the PR Title check

@BKDDFS
fix: add conventional commit prefix to Dependabot config
2939e41 
Dependabot PRs fail the semantic-pull-request check because their
titles don't follow conventional commits format. Adding commit-message
prefix "build" makes Dependabot produce compliant titles.
@sonarqubecloud
Copy link

sonarqubecloud bot commented Feb 9, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@codecov-commenter
Copy link

codecov-commenter commented Feb 9, 2026

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@BKDDFS BKDDFS merged commit 2c211e3 into dev Feb 9, 2026
9 checks passed
BKDDFS added a commit that referenced this pull request Feb 9, 2026
@BKDDFS
fix: dependabot pr-titles (#82)
dcf5b16 
* chore: bump version to 3.0.0

* fix: add conventional commit prefix to Dependabot config (#81)

Dependabot PRs fail the semantic-pull-request check because their
titles don't follow conventional commits format. Adding commit-message
prefix "build" makes Dependabot produce compliant titles.
BKDDFS added a commit that referenced this pull request Feb 10, 2026
@BKDDFS @dependabot
build: dependabot bump (#92)
b9c8946 
* chore: bump version to 3.0.0

* fix: add conventional commit prefix to Dependabot config (#81)

Dependabot PRs fail the semantic-pull-request check because their
titles don't follow conventional commits format. Adding commit-message
prefix "build" makes Dependabot produce compliant titles.

* fix: set Dependabot target branch to dev (#85)

Dependabot PRs were targeting main which is protected. Setting
target-branch to dev to match the project's branching flow.

* Bump actions/checkout from 6.0.1 to 6.0.2 (#72)

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@8e8c483...de0fac2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump opencv-python from 4.13.0.90 to 4.13.0.92 (#90)

Bumps [opencv-python](https://github.com/opencv/opencv-python) from 4.13.0.90 to 4.13.0.92.
- [Release notes](https://github.com/opencv/opencv-python/releases)
- [Commits](https://github.com/opencv/opencv-python/commits)

---
updated-dependencies:
- dependency-name: opencv-python
  dependency-version: 4.13.0.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump ruff from 0.14.14 to 0.15.0 (#89)

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.14 to 0.15.0.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.14...0.15.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump onnxruntime-gpu from 1.23.2 to 1.24.1 (#91)

Bumps [onnxruntime-gpu](https://github.com/microsoft/onnxruntime) from 1.23.2 to 1.24.1.
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.23.2...v1.24.1)

---
updated-dependencies:
- dependency-name: onnxruntime-gpu
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
BKDDFS added a commit that referenced this pull request Feb 16, 2026
@BKDDFS @dependabot @claude
build: bump deps and base image (#98)
bf60d6a 
* chore: bump version to 3.0.0

* fix: add conventional commit prefix to Dependabot config (#81)

Dependabot PRs fail the semantic-pull-request check because their
titles don't follow conventional commits format. Adding commit-message
prefix "build" makes Dependabot produce compliant titles.

* fix: set Dependabot target branch to dev (#85)

Dependabot PRs were targeting main which is protected. Setting
target-branch to dev to match the project's branching flow.

* Bump actions/checkout from 6.0.1 to 6.0.2 (#72)

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@8e8c483...de0fac2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump opencv-python from 4.13.0.90 to 4.13.0.92 (#90)

Bumps [opencv-python](https://github.com/opencv/opencv-python) from 4.13.0.90 to 4.13.0.92.
- [Release notes](https://github.com/opencv/opencv-python/releases)
- [Commits](https://github.com/opencv/opencv-python/commits)

---
updated-dependencies:
- dependency-name: opencv-python
  dependency-version: 4.13.0.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump ruff from 0.14.14 to 0.15.0 (#89)

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.14 to 0.15.0.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.14...0.15.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump onnxruntime-gpu from 1.23.2 to 1.24.1 (#91)

Bumps [onnxruntime-gpu](https://github.com/microsoft/onnxruntime) from 1.23.2 to 1.24.1.
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.23.2...v1.24.1)

---
updated-dependencies:
- dependency-name: onnxruntime-gpu
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump ruff from 0.15.0 to 0.15.1 (#97)

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.0 to 0.15.1.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.0...0.15.1)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump fastapi from 0.128.0 to 0.129.0 (#96)

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.128.0 to 0.129.0.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.128.0...0.129.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.129.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump ty from 0.0.14 to 0.0.17 (#94)

Bumps [ty](https://github.com/astral-sh/ty) from 0.0.14 to 0.0.17.
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.14...0.0.17)

---
updated-dependencies:
- dependency-name: ty
  dependency-version: 0.0.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump github/codeql-action from 3.32.0 to 4.32.3 (#93)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.32.0 to 4.32.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@439137e...9e907b5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build: bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 (#95)

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.33.1 to 0.34.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@b6643a2...c1824fd)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: remove trailing whitespace in codeql.yml

Fix pre-commit CI failure on PR #98 caused by trailing whitespace.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: add missing newline at end of codeql.yml

The end-of-file-fixer hook requires a trailing newline.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* build: bump python base image from 3.13.11 to 3.13.12

Addresses Trivy security alerts for gnutls, pip, and libxml2
vulnerabilities in the base Docker image.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@BKDDFS @codecov-commenter