Should we exclude PRs from dependabot and renovate bots from the "immediate response" workflow?

[G-Rath]

I've implemented this here octokit/webhooks@097fd53 but since this workflow exists in multiple repos making a discussion for it first felt right.

It's a small thing, but it would reduce the noise notification wise

[oscard0m]

IMO yes

[gr2m]

I vote yes, too.

We could even consider to only post the message to pull requests coming from forks. All others are contributors and know

[G-Rath]

Do you know if the GitHub Actions event context provides that information? either way we can start with the bots and hopefully add that later if we find a way

[gr2m]

we can check if

1. the event is not "pull_request"
2. or repository owner is not octokit

    if: ${{ github.event_name != 'pull_request' && github.repository_owner != 'octokit' }}

THat should be true when triggered by

1. The issues event
2. The pull_request event when coming from a fork

[G-Rath]

I don't know if we've got some tool for bulk updating workflows across repos so I've just opened octokit/webhooks#840 to start with

[wolfy1339]

You can write a simple octoherd script to do the modifications

[G-Rath]

sweet I'll look into that at some point - for now I'm just going to manually do a few of the big ones

[wolfy1339]

This has been resolved as far as renovate and dependabot go.

We should probably also exclude octokitbot, and githubactions[bot] as well