Skip to content

Conversation

jmeridth
Copy link
Member

Pull Request

Proposed Changes

Based on Dependabot docs we can specify the labels applied. Previously Dependabot was applying major, minor', or patchlabels based on the version of dependency updates. This was causing conflicts with our auto releasing. If those labels were present they were being applied to our releases. This is not what we want. We are chaning to just note the package type (i.e., go, github_actions, etc) anddependencies`, in case we ever need to filter in the UI.

Readiness Checklist

Author/Contributor

  • If documentation is needed for this change, has that been included in this pull request
  • run make lint and fix any issues that you have introduced
  • run make test and ensure you have test coverage for the lines you are introducing
  • If publishing new data to the public (scorecards, security scan results, code quality results, live dashboards, etc.), please request review from @jeffrey-luszcz

Reviewer

  • Label as either fix, documentation, enhancement, infrastructure, maintenance or breaking

Based on [Dependabot docs](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#labels--) we can specify the labels applied. Previously Dependabot was applying `major`, `minor', or `patch` labels based on the version of dependency updates. This was causing conflicts with our auto releasing. If those labels were present they were being applied to our releases. This is not what we want. We are chaning to just note the package type (i.e., go, github_actions, etc) and `dependencies`, in case we ever need to filter in the UI.

Signed-off-by: jmeridth <[email protected]>
@jmeridth jmeridth self-assigned this Sep 16, 2025
@jmeridth jmeridth requested a review from a team as a code owner September 16, 2025 15:28
@Copilot Copilot AI review requested due to automatic review settings September 16, 2025 15:28
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the Dependabot configuration to specify custom labels for dependency updates, replacing the default semantic version labels (major/minor/patch) that were conflicting with the auto-release process.

  • Adds explicit label configuration for each package ecosystem (python, github_actions, docker)
  • Replaces problematic semantic version labels with package-type labels plus "dependencies"
  • Prevents label conflicts that were affecting the project's auto-release workflow

@github-actions github-actions bot added the fix label Sep 16, 2025
@jmeridth jmeridth merged commit 7d56fc5 into main Sep 16, 2025
32 checks passed
@jmeridth jmeridth deleted the jm_dependabot_labels_update branch September 16, 2025 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant