Skip to content

Conversation

jmeridth
Copy link
Member

Pull Request

Proposed Changes

Based on Dependabot docs we can specify the labels applied. Previously Dependabot was applying major, minor', or patchlabels based on the version of dependency updates. This was causing conflicts with our auto releasing. If those labels were present they were being applied to our releases. This is not what we want. We are chaning to just note the package type (i.e., go, github_actions, etc) anddependencies`, in case we ever need to filter in the UI.

Readiness Checklist

Author/Contributor

  • If documentation is needed for this change, has that been included in this pull request
  • run make lint and fix any issues that you have introduced
  • run make test and ensure you have test coverage for the lines you are introducing
  • If publishing new data to the public (scorecards, security scan results, code quality results, live dashboards, etc.), please request review from @jeffrey-luszcz

Reviewer

  • Label as either fix, documentation, enhancement, infrastructure, maintenance, or breaking

Based on [Dependabot docs](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#labels--) we can specify the labels applied. Previously Dependabot was applying `major`, `minor', or `patch` labels based on the version of dependency updates. This was causing conflicts with our auto releasing. If those labels were present they were being applied to our releases. This is not what we want. We are chaning to just note the package type (i.e., go, github_actions, etc) and `dependencies`, in case we ever need to filter in the UI.

Signed-off-by: jmeridth <jmeridth@gmail.com>
@Copilot Copilot AI review requested due to automatic review settings September 16, 2025 15:40
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Updates Dependabot configuration to use custom labels for dependency updates, replacing the default version-based labels (major, minor, patch) with package type labels to prevent conflicts with the auto-release system.

  • Replaces default Dependabot version labels with custom package type and dependency labels
  • Adds consistent labeling across Python, GitHub Actions, and Docker dependency updates
  • Prevents auto-release conflicts by avoiding version-based labels

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@github-actions github-actions bot added the fix label Sep 16, 2025
also updated linter and the fixes that goes with it.

Signed-off-by: jmeridth <jmeridth@gmail.com>
@jmeridth jmeridth merged commit c077fad into main Sep 16, 2025
33 checks passed
@jmeridth jmeridth deleted the jm_dependabot_labels_update branch September 16, 2025 15:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants