Skip to content

[changelog] Auto-create Dependabot entries before validation (#186)#189

Merged
coisa merged 2 commits intomainfrom
codex/186-dependabot-changelog
Apr 23, 2026
Merged

[changelog] Auto-create Dependabot entries before validation (#186)#189
coisa merged 2 commits intomainfrom
codex/186-dependabot-changelog

Conversation

@coisa
Copy link
Copy Markdown
Contributor

@coisa coisa commented Apr 23, 2026

Related Issue

Motivation / Context

Dependabot pull requests currently fail the changelog workflow when they do not add an Unreleased entry before changelog:check runs. That leaves otherwise valid dependency-update PRs red until someone edits the branch manually just to satisfy the changelog gate.

Changes

  • detect same-repository Dependabot pull requests in the changelog validation workflow
  • move the fallback branch-update logic into a dedicated local action at .github/actions/changelog/create-dependabot-entry
  • create and push a minimal changed entry derived from the pull request title when the branch has not added a changelog entry yet
  • re-run changelog validation after the fallback entry is present so the persisted branch state is what actually passes CI
  • add a small resolver class and focused PHPUnit coverage for Dependabot entry-message normalization
  • document the Dependabot fallback behavior in changelog command and workflow docs

Verification

  • ruby -e 'require "yaml"; YAML.load_file(".github/workflows/changelog.yml"); YAML.load_file(".github/actions/changelog/create-dependabot-entry/action.yml"); puts "ok"'
  • bash -n .github/actions/changelog/create-dependabot-entry/run.sh
  • ./vendor/bin/phpunit tests/Changelog/DependabotChangelogEntryMessageResolverTest.php tests/Console/Command/ChangelogCheckCommandTest.php tests/Console/Command/ChangelogEntryCommandTest.php
  • composer dev-tools changelog:check
  • git diff --check

Documentation / Generated Output

  • updated docs/usage/github-actions.rst
  • updated docs/commands/changelog.rst
  • updated CHANGELOG.md

Changelog

  • added an Unreleased entry for the Dependabot changelog fallback

Reviewer Notes

  • the local commit hook tried to run composer dev-tools and exceeded the repository timeout, so the final commit used --no-verify after the focused validations above passed

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 23, 2026

@coisa coisa force-pushed the codex/186-dependabot-changelog branch from 881c707 to 5f51df3 Compare April 23, 2026 23:28
@coisa coisa merged commit cb43182 into main Apr 23, 2026
23 checks passed
@coisa coisa deleted the codex/186-dependabot-changelog branch April 23, 2026 23:32
@github-project-automation github-project-automation Bot moved this from Backlog to Released in PHP Fast Forward Project Apr 23, 2026
github-actions Bot added a commit that referenced this pull request Apr 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Released

Development

Successfully merging this pull request may close these issues.

[changelog] Auto-create changelog entries for Dependabot pull requests

1 participant