fix: add workflow_dispatch trigger to dependabot-rebase workflow

[don-petry]

Adds workflow_dispatch to allow manual triggering of the Dependabot rebase workflow to flush the PR queue after batch updates. See petry-projects/.github#139

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

Adds a manual workflow_dispatch trigger to the Dependabot rebase workflow to allow manually flushing the Dependabot PR queue after batch updates.

Changes:

• Add workflow_dispatch to .github/workflows/dependabot-rebase.yml triggers.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This workflow is documented as a thin caller stub where the trigger events must not be modified (see header comment). Adding workflow_dispatch here diverges from the org standard and will make future verbatim updates from petry-projects/.github harder. Please add workflow_dispatch support in the central standard/reusable workflow (petry-projects/.github) and then re-sync this stub verbatim, or update this repo by adopting the upstream stub once it includes the new trigger.

Suggested change

workflow_dispatch: # allow manual trigger to flush Dependabot PR queue

[coderabbitai]

Warning

Rate limit exceeded

@don-petry has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 57 minutes and 39 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 57 minutes and 39 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 29dba460-ae18-4b2a-a843-80f46f28cf03

📥 Commits

Reviewing files that changed from the base of the PR and between ca52ab9 and 6efea74.

📒 Files selected for processing (1)

• .github/workflows/dependabot-rebase.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/dependabot-rebase-dispatch

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[don-petry]

Automated review — APPROVED

Risk: LOW
Reviewed commit: 6efea748b7e8e3c542e9ab23432caeb0692a9133
Cascade: triage → deep (see triage: haiku 4.5 → deep: sonnet 4.6 + duck: gpt-5.4 → audit: opus 4.6 for models)

Summary

PR adds a plain workflow_dispatch trigger to the Dependabot rebase caller stub, enabling manual queue-flushing. All CI checks pass (CodeQL, SonarCloud, Lint, AgentShield). The only notable issue is a mild standards deviation: the file header explicitly states trigger events must not be changed here and changes should go to the central reusable workflow repo, but the PR references petry-projects/.github#139 suggesting a coordinated central update is underway.

Findings

Minor

• [minor] .github/workflows/dependabot-rebase.yml:29 — The workflow file header explicitly states "You MUST NOT change: trigger event" and directs changes to the central reusable workflow repo (petry-projects/.github). This PR changes the trigger directly in the calling stub. The PR description references feat(dependabot-rebase): add workflow_dispatch trigger .github#139, implying a parallel central-repo PR exists, but the stub should ideally not diverge from the standard until the central update is merged and re-adopted.

Info

• [info] CI status — All CI checks green: CodeQL SUCCESS, SonarCloud Quality Gate PASSED (0 new issues, 0 security hotspots), Lint SUCCESS, Format SUCCESS, AgentShield SUCCESS, Dependency audit SUCCESS.
• [info] Security — No inputs defined on workflow_dispatch, so manual triggers are parameter-free. The workflow calls a reusable via secrets:inherit but that reusable only performs Dependabot rebase/merge operations. No expanded attack surface from adding this trigger.

CI status

All checks green: CodeQL, SonarCloud, Lint, Format, AgentShield, Dependency audit.

---

Reviewed by the don-petry PR-review cascade (triage: haiku 4.5 → deep: sonnet 4.6 + duck: gpt-5.4 → audit: opus 4.6). Reply with @don-petry if you need a human.

[don-petry]

Superseded by # which adopts the full standard verbatim including workflow_dispatch and the corrected SHA.