Skip to content

fix(preview): require configured deployment reviewers - #166

Merged
richardsolomou merged 2 commits into
mainfrom
fix/dependabot-preview-protection
Aug 30, 2026
Merged

fix(preview): require configured deployment reviewers#166
richardsolomou merged 2 commits into
mainfrom
fix/dependabot-preview-protection

Conversation

@richardsolomou

Copy link
Copy Markdown
Owner

Problem

GitHub creates a referenced environment automatically when it does not exist. A consumer could therefore adopt the Dependabot approval workflow without configuring required reviewers, leaving deployments unprotected.

Changes

The deployment job now checks that dependabot-preview has a required_reviewers protection rule before touching Dokploy. Missing repository setup fails closed with a direct error. Normal previews and closed-PR cleanup do not run this check.

How did you test this code?

  • Ran the ras-stack test suite: 411 passed, 4 skipped.
  • Ran actionlint against .github/workflows/deploy-dokploy-preview.yml.
  • Ran oxfmt --check against the changed files.
  • Ran git diff --check.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 30, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
ras-stack ae0410e Aug 30 2026, 08:44 PM

…w-protection

# Conflicts:
#	.changeset/tame-cats-approve.md
@richardsolomou
richardsolomou merged commit c6b28c3 into main Aug 30, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant