[lukeheath]

Related issue: N/A

Removes the "Create QA ticket for Dependabot PRs" CI workflow (.github/workflows/dependabot-qa-ticket.yml), which automatically filed a QA issue on the #g-orchestration board for every Dependabot code-dependency PR. Also removes the two zizmor gate waivers (dangerous-triggers, bot-conditions) that existed only for this workflow.

Checklist for submitter

If some of the following don't apply, delete the relevant line.

• Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters.

Testing

• QA'd all new/changed functionality manually (CI-only change: workflow file deleted, no automated tests apply)

Summary by CodeRabbit

• Chores
  • Removed the automated Dependabot QA ticket workflow.
  • Removed associated security-scan exceptions for the deleted workflow.
  • Dependency pull requests will no longer automatically create QA tickets, post related comments, or receive project-board assignments.

[Copilot]

Pull request overview

Removes a GitHub Actions workflow that auto-created QA tracking issues for Dependabot PRs, and cleans up the associated zizmor gate waivers that existed solely to suppress findings for that workflow.

Changes:

• Deleted .github/workflows/dependabot-qa-ticket.yml (“Create QA ticket for Dependabot PRs”).
• Removed now-unneeded zizmor waivers (dangerous-triggers, bot-conditions) from .github/zizmor-gate.yml.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/zizmor-gate.yml	Removes rule waivers that only applied to the deleted workflow.
.github/workflows/dependabot-qa-ticket.yml	Deletes the Dependabot QA ticket creation workflow.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 80745dc6-9317-4af4-8ddf-c03439dcd0b8

📥 Commits

Reviewing files that changed from the base of the PR and between 3d09593 and 665c954.

📒 Files selected for processing (2)

• .github/workflows/dependabot-qa-ticket.yml
• .github/zizmor-gate.yml

💤 Files with no reviewable changes (2)

• .github/workflows/dependabot-qa-ticket.yml
• .github/zizmor-gate.yml

Included review availability: Your plan includes up to 8 reviews per rolling hour; 7 remain after this review.

---

Walkthrough

The Dependabot QA ticket GitHub Actions workflow was deleted. Its pull-request trigger, dependency-branch filtering, duplicate detection, QA issue creation, pull-request comments, and project-board assignment logic were removed. The zizmor configuration no longer ignores dangerous-triggers or bot-conditions findings for that workflow.

Merge Risk: ⚪ Minimal · up to 665c9

This PR removes an automated QA-ticket workflow and its workflow-specific security waivers; no actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the primary change: removing the Dependabot QA ticket workflow.
Description check	✅ Passed	The description explains the workflow and zizmor waiver removals, identifies no related issue, and documents applicable testing.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch remove-dependabot-qa-ticket-workflow

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}