PR comment commands

[rarkins]

What would you like Renovate to be able to do?

Allow authorized users to control certain functionality using PR comments

If you have any ideas on how this should be implemented, please tell us here.

There exists some prior art:

• https://docs.github.com/en/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates#managing-dependabot-pull-requests-with-comment-commands
• https://socket.dev/blog/introducing-bot-commands

And plenty of prior requests, of which #1355 is the only one I could find open.

While neither of those services explicitly mentions it, one would hope that the command must be by a maintainer and not just any random person with access to the repo (which would mean any GitHub user for public repos).

Q1: How can we know which users are allowed to make such comments. Do we need extra permissions compared to today?

Q2: Which commands do we want to support?

Q3: What are the performance impacts of both of the above (e.g. fetching allowed users each run, fetching every PR comment)

Is this a feature you are interested in implementing yourself?

No