Skip to content

mesh-2816: add automatic dependabot pr#157

Merged
james-bradley-nhs merged 3 commits intodevelopfrom
mesh-2816-automate-dependabot
Apr 7, 2026
Merged

mesh-2816: add automatic dependabot pr#157
james-bradley-nhs merged 3 commits intodevelopfrom
mesh-2816-automate-dependabot

Conversation

@james-bradley-nhs
Copy link
Copy Markdown
Contributor

No description provided.

@james-bradley-nhs james-bradley-nhs requested review from a team and matt-mercer as code owners April 1, 2026 10:55
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026

☂️ Python Coverage

current status: ✅

Overall Coverage

Lines Covered Coverage Threshold Status
680 556 82% 70% 🟢

New Files

No new covered files...

Modified Files

No covered modified files...

updated for commit: 1e7f162 by action🐍

Copy link
Copy Markdown
Contributor

@johnwilliams57-nhs johnwilliams57-nhs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i've just added a couple of questions. also it's technically missing a comment

steps:
- name: Fetch Dependabot metadata
id: metadata
uses: dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this should have the a comment after the sha:

#v3.0.0

(https://github.com/dependabot/fetch-metadata/releases/tag/v3.0.0)

Comment thread .github/workflows/pull-request.yml Outdated
git merge --ff-only "${{ github.event.pull_request.head.sha }}"

- name: setup python
id: setup-python
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

seems fine to me. but out of interest, why've you added this id?

Comment thread .github/workflows/pull-request.yml Outdated
publish:
runs-on: ubuntu-latest
if: github.repository == 'NHSDigital/mesh-client' && github.actor != 'dependabot[bot]'
if: github.repository == 'NHSDigital/mesh-client' && github.event.pull_request.user.login != 'dependabot[bot]'
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i was expecting the changes to match mesh-sandbox here, but it doesn't:

https://github.com/NHSDigital/mesh-sandbox/blob/develop/.github/workflows/pull-request.yml#L241

is mesh-sandbox wrong?

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Apr 1, 2026

@james-bradley-nhs james-bradley-nhs merged commit 1506608 into develop Apr 7, 2026
21 of 22 checks passed
@james-bradley-nhs james-bradley-nhs deleted the mesh-2816-automate-dependabot branch April 7, 2026 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants