`do-not-merge/invalid-commit-message` appears when creating a bump PR for dependencies with an @ prefix

[mbobrovskyi]

What happened:
We need to manually create PRs for dependencies with an @ prefix – such as @mui/material or @vitejs/plugin-react – because Prow adds the do-not-merge/invalid-commit-message label to PRs that contain @ in the description.

What you expected to happen:
Don't add do-not-merge/invalid-commit-message label for Dependabot PRs.

How to reproduce it (as minimally and precisely as possible):
It is creating automatically by Dependabot. For example #5767.

Anything else we need to know?:

Environment:

• Kubernetes version (use kubectl version):
• Kueue version (use git describe --tags --dirty --always):
• Cloud provider or hardware configuration:
• OS (e.g: cat /etc/os-release):
• Kernel (e.g. uname -a):
• Install tools:
• Others:

[mbobrovskyi]

cc @tenzen-y @mimowo

[mbobrovskyi]

I also tried updating the commit automatically using a GitHub Action (mbobrovskyi@41b41dd), but Dependabot closes the PR after a force push.

[mbobrovskyi]

One more times #5808.

[mimowo]

would it need to be fixed in kueue repo or outside? Do you know where is the code rejecting commit messages with @?

[mbobrovskyi]

It looks like the Prow bot adds the label when it detects an @ symbol in the commit message. However, I'm not sure how to configure Dependabot to avoid including @ in its commit messages.

[mimowo]

Yeah, so it seems like 3 ways:

1. fix PRow not to validate it
2. configure dwpendabot to allow not doing this
3. use a GH action to override the commit message, go example replace all @with @ or even with another char.

I think 1. would be the long term solution, it seems like an unnecesaary validation in prow. Short term im ok with 3

[mbobrovskyi]

use a GH action to override the commit message, go example replace all @with @ or even with another char.

I tried updating the commit and change @ with some other chart automatically using a GitHub Action (mbobrovskyi@41b41dd), but Dependabot closes the PR after a force push. :(