Skip to content

Conversation

@jmeridth
Copy link
Contributor

Pull Request

Proposed Changes

Based on Dependabot docs we can specify the labels applied. Previously Dependabot was applying major, minor', or patchlabels based on the version of dependency updates. This was causing conflicts with our auto releasing. If those labels were present they were being applied to our releases. This is not what we want. We are chaning to just note the package type (i.e., go, github_actions, etc) anddependencies`, in case we ever need to filter in the UI.

Readiness Checklist

Author/Contributor

  • If documentation is needed for this change, has that been included in this pull request
  • run make lint and fix any issues that you have introduced
  • run make test and ensure you have test coverage for the lines you are introducing
  • If publishing new data to the public (scorecards, security scan results, code quality results, live dashboards, etc.), please request review from @jeffrey-luszcz

Reviewer

  • Label as either fix, documentation, enhancement, infrastructure, maintenance or breaking

Based on [Dependabot docs](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#labels--) we can specify the labels applied. Previously Dependabot was applying `major`, `minor', or `patch` labels based on the version of dependency updates. This was causing conflicts with our auto releasing. If those labels were present they were being applied to our releases. This is not what we want. We are chaning to just note the package type (i.e., go, github_actions, etc) and `dependencies`, in case we ever need to filter in the UI.

Signed-off-by: jmeridth <jmeridth@gmail.com>
@jmeridth jmeridth self-assigned this Sep 16, 2025
@jmeridth jmeridth requested a review from a team as a code owner September 16, 2025 15:35
Copilot AI review requested due to automatic review settings September 16, 2025 15:35
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the Dependabot configuration to specify custom labels for dependency updates instead of using the default semantic versioning labels (major, minor, patch) that were conflicting with the auto-release process.

  • Replaces default Dependabot semantic version labels with package-type specific labels
  • Adds consistent "dependencies" label across all package ecosystems
  • Prevents label conflicts with the automated release workflow

@github-actions github-actions bot added the fix label Sep 16, 2025
@jmeridth jmeridth merged commit 2d43d4e into main Sep 16, 2025
31 checks passed
@jmeridth jmeridth deleted the jm_dependabot_labels_update branch September 16, 2025 15:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant