Skip to content

[ci] Skip PR title/issue-ref validation for Dependabot PRs#190

Merged
lugassawan merged 1 commit into
mainfrom
ci/dependabot-pr-validation-bypass
May 6, 2026
Merged

[ci] Skip PR title/issue-ref validation for Dependabot PRs#190
lugassawan merged 1 commit into
mainfrom
ci/dependabot-pr-validation-bypass

Conversation

@lugassawan
Copy link
Copy Markdown
Owner

Summary

  • Gates Validate PR title and Validate issue reference steps on github.event.pull_request.user.login != 'dependabot[bot]'
  • Leaves Validate PR description unconditional — Dependabot always writes a non-empty body
  • Uses PR author (user.login) rather than github.actor to stay stable on synchronize events triggered by humans rebasing a Dependabot branch

Why

Dependabot hard-codes : between prefix and message, so its titles (chore(deps): bump …) can never match the required [type] … regex. The fix must be in the workflow, not in dependabot.yml.

Test plan

  • Human PR with non-conforming title → Validate PR title and Validate issue reference still fail
  • Next Dependabot PR → both steps show Skipped, Validate PR description shows Success

Closes #190

Dependabot cannot produce a title matching the required `[type] …` format
because its commit-message prefix always inserts `: ` (not ` `). Gate the
two affected steps on `github.event.pull_request.user.login` so Dependabot
PRs pass CI while human PRs remain fully validated. The empty-body check is
left unconditional (Dependabot always writes a non-empty body).
@lugassawan lugassawan merged commit 0a8e4ff into main May 6, 2026
5 checks passed
@lugassawan lugassawan deleted the ci/dependabot-pr-validation-bypass branch May 6, 2026 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant