Skip to content

fix(ci): exempt Dependabot 'Bump' subjects from commitlint (#3761)#3813

Merged
williamzujkowski merged 1 commit into
mainfrom
fix/dependabot-commitlint-3761
Jun 9, 2026
Merged

fix(ci): exempt Dependabot 'Bump' subjects from commitlint (#3761)#3813
williamzujkowski merged 1 commit into
mainfrom
fix/dependabot-commitlint-3761

Conversation

@williamzujkowski

Copy link
Copy Markdown
Collaborator

Closes #3761.

Problem

Dependabot keeps a capital 'Bump' in its commit subject even with the configured chore(deps)/chore(ci) prefix (.github/dependabot.yml), and subject-case (no sentence-case) rejects it. So every Dependabot PR fails the Commit Messages gate (and CI Success cascades) despite green tests, requiring a manual squash-with-corrected-subject each time (#3757/#3758/#3759 were all blocked).

Fix

Add a commitlint ignores predicate matching <prefix>: Bump <pkg> from <a> to <b> so those bot commits are exempt — without weakening subject-case for human commits (the alternative, lowering the rule, was rejected).

Verified (commitlint CLI)

message exit
chore(deps): Bump vitest from 4.1.7 to 4.1.8 0 (ignored)
chore(ci): Bump actions/checkout from 4 to 5 0 (ignored)
fix(mcp): break a cycle 0 (valid)
badtype: whatever 1 (gate works)
feat: Add a thing 1 (sentence-case still rejected)

Config-only (root commitlint.config.ts) — no src/ change, no changeset.

🤖 Generated with Claude Code

Dependabot keeps a capital 'Bump' in its commit subject even with the configured
chore(deps)/chore(ci) prefix (.github/dependabot.yml), and subject-case (no
sentence-case) rejects it — so EVERY Dependabot PR fails the Commit Messages gate
(and CI Success cascades) despite green tests, needing a manual squash each time
(#3757/#3758/#3759 were all blocked).

Add a commitlint `ignores` predicate matching `<prefix>: Bump <pkg> from <a> to <b>`
so those bot commits are exempt, WITHOUT weakening subject-case for humans.
Verified via the commitlint CLI: Dependabot 'Bump' subjects pass; bad types and
human sentence-case subjects still fail.

Closes #3761.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@williamzujkowski williamzujkowski merged commit f03f110 into main Jun 9, 2026
38 checks passed
@williamzujkowski williamzujkowski deleted the fix/dependabot-commitlint-3761 branch June 9, 2026 17:49
@github-project-automation github-project-automation Bot moved this from Backlog to Done in nexus-agents project Jun 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: Dependabot PRs always fail commitlint (capital 'Bump' subject) — recurring friction

1 participant