-
Notifications
You must be signed in to change notification settings - Fork 109
Simplify dependabot manager instructions to 3 bullet points #14289
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Co-authored-by: mnkiefer <8320933+mnkiefer@users.noreply.github.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR updates the Dependabot Project Manager workflow’s instruction content to be concise while keeping the existing workflow/frontmatter configuration intact.
Changes:
- Replaced ~400 lines of detailed workflow guidance with 3 high-level bullet directives in the workflow’s markdown instructions.
- Regenerated the compiled lock workflow, including removing now-unused
GH_AW_GITHUB_SERVER_URLenvironment wiring.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| .github/workflows/dependabot-project-manager.md | Collapses verbose instructions into a 3-bullet “burner” format. |
| .github/workflows/dependabot-project-manager.lock.yml | Recompiled workflow output; removes unused environment variables related to server URL. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| - Find all open Dependabot PRs and add them to the project. | ||
| - Create bundle issues, each for exactly **one runtime + one manifest file**. | ||
| - Add bundle issues to the project, and assign them to Copilot. |
Copilot
AI
Feb 7, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The new instructions say to "find all open Dependabot PRs" and create bundle issues for each runtime+manifest, but safe-outputs enforce hard caps (update-project max=50, create-issue max=20). If there are more PRs/bundles than allowed, the agent can’t complete the stated objective and may produce partial/failed runs. Consider updating the bullets to explicitly respect these limits (e.g., process up to the max and prioritize security/oldest first, and/or create a single summary issue when limits are exceeded).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@copilot apply changes based on this feedback
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated instructions to explicitly respect safe-output limits and add prioritization guidance (commit 90b3f9e):
- Added "up to max 50" for project items
- Added "up to max 20" for bundle issues
- Added prioritization: security updates first, then oldest PRs
- Added overflow handling: create summary issue when limits exceeded
🔍 PR Triage ResultsCategory: refactor | Risk: medium | Priority: 47/100 Scores Breakdown
📋 Recommended Action: batch_reviewMedium-risk refactor with good quality. Part of batch-workflow-improvements group with similar workflow simplification changes. Batch ID: batch-refactor-001 (grouped with PRs #14292) Triaged by PR Triage Agent on 2026-02-07
|
Co-authored-by: mnkiefer <8320933+mnkiefer@users.noreply.github.com>
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.