Skip to content

Conversation

@jmeridth
Copy link
Member

Pull Request

Proposed Changes

Based on Dependabot docs we can specify the labels applied. Previously Dependabot was applying major, minor', or patchlabels based on the version of dependency updates. This was causing conflicts with our auto releasing. If those labels were present they were being applied to our releases. This is not what we want. We are chaning to just note the package type (i.e., go, github_actions, etc) anddependencies`, in case we ever need to filter in the UI.

Readiness Checklist

Author/Contributor

  • If documentation is needed for this change, has that been included in this pull request
  • run make lint and fix any issues that you have introduced
  • run make test and ensure you have test coverage for the lines you are introducing
  • If publishing new data to the public (scorecards, security scan results, code quality results, live dashboards, etc.), please request review from @jeffrey-luszcz

Reviewer

  • Label as either fix, documentation, enhancement, infrastructure, maintenance, or breaking

Based on [Dependabot docs](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#labels--) we can specify the labels applied. Previously Dependabot was applying `major`, `minor', or `patch` labels based on the version of dependency updates. This was causing conflicts with our auto releasing. If those labels were present they were being applied to our releases. This is not what we want. We are chaning to just note the package type (i.e., go, github_actions, etc) and `dependencies`, in case we ever need to filter in the UI.

Signed-off-by: jmeridth <jmeridth@gmail.com>
@jmeridth jmeridth self-assigned this Sep 16, 2025
Copilot AI review requested due to automatic review settings September 16, 2025 15:26
@jmeridth jmeridth requested a review from a team as a code owner September 16, 2025 15:26
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Updates Dependabot configuration to use custom labels instead of default semantic versioning labels (major, minor, patch) to prevent conflicts with auto-releasing workflows.

  • Adds custom labels for each package ecosystem (python, github_actions, docker) along with "dependencies"
  • Replaces problematic semantic version labels that were interfering with release automation

@github-actions github-actions bot added the fix label Sep 16, 2025
@jmeridth jmeridth merged commit 5ee2efc into main Sep 16, 2025
34 checks passed
@jmeridth jmeridth deleted the jm_dependabot_labels_update branch September 16, 2025 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants