Skip to content

fix(ci): support Dependabot in external PR test workflow#277

Merged
vishal-bala merged 3 commits intomainfrom
ci/test-dependabot-prs
Apr 10, 2026
Merged

fix(ci): support Dependabot in external PR test workflow#277
vishal-bala merged 3 commits intomainfrom
ci/test-dependabot-prs

Conversation

@vishal-bala
Copy link
Copy Markdown
Contributor

@vishal-bala vishal-bala commented Apr 10, 2026

Summary

  • Allow the manual external PR test workflow to run against Dependabot PRs in addition to fork-based PRs
  • Record the resolved PR number once and reuse it in check-run messages, rename the check/workflow labels to cover all external PRs, and disable persisted checkout credentials during execution

With this change, a maintainer can go to Actions -> Test External PR, provide the PR number of the Dependabot PR, and run the workflow. This will create a status check on the PR that resolves to whether the tests have passed.


Note

Low Risk
Low risk CI-only change; main impact is whether the workflow correctly validates/labels external PRs and reports check-run status for the intended PR/commit.

Overview
Renames the manual workflow from fork-only to external PR testing and broadens validation to allow Dependabot PRs in addition to forked PRs.

Resolves and reuses the PR number via job outputs, improving check-run messaging, and enhances check runs with a details_url plus richer status text. Checkout now disables persisted credentials (persist-credentials: false) when pulling external PR code.

Reviewed by Cursor Bugbot for commit 4d9bbf7. Bugbot is set up for automated code reviews on this repo. Configure here.

@vishal-bala vishal-bala self-assigned this Apr 10, 2026
@jit-ci
Copy link
Copy Markdown

jit-ci Bot commented Apr 10, 2026

🛡️ Jit Security Scan Results

CRITICAL HIGH MEDIUM

✅ No security findings were detected in this PR


Security scan by Jit

@vishal-bala vishal-bala marked this pull request as ready for review April 10, 2026 08:09
Copy link
Copy Markdown

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review completed. The changes properly extend the workflow to support Dependabot PRs while maintaining security by preserving the manual trigger requirement and disabling persisted credentials.


🤖 Automated review complete. Please react with 👍 or 👎 on the individual review comments to provide feedback on their usefulness.

Comment thread .github/workflows/test-fork-pr.yml
Copy link
Copy Markdown

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the workflow changes for Dependabot support. Found a potential issue with null reference handling that could cause the workflow to fail. See inline comment for details.


🤖 Automated review complete. Please react with 👍 or 👎 on the individual review comments to provide feedback on their usefulness.

Comment thread .github/workflows/test-fork-pr.yml
Copy link
Copy Markdown
Contributor

@nkanu17 nkanu17 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@vishal-bala vishal-bala merged commit a60a59c into main Apr 10, 2026
25 checks passed
@vishal-bala vishal-bala deleted the ci/test-dependabot-prs branch April 10, 2026 15:52
@nkanu17 nkanu17 mentioned this pull request Apr 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants