Repository navigation
ci: let Dependabot label all its pull requests - #146
Merged
Merged
Conversation
Remove `target-branch` from every Dependabot entry: it names the default branch anyway, and while it is set, GitHub doesn't apply an entry's options, labels included, to security updates. Security update pull requests then get `type: dependencies` instead of Dependabot's own labels. The `ignore` rules now also apply to security updates, as intended. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Contributor
Reviewer's GuideConfigurationRemove
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
uniqueg
marked this pull request as ready for review
November 14, 2026 19:30
Contributor
Linked issuesChecked at commit 120aba7 #145 ci: let Dependabot label all its pull requests · 3 of 4 met · 1 to check by hand
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Lets Dependabot label all its pull requests, security updates included, with the organisation's label
type: dependenciesonly, instead of its own labels (dependenciesplus an ecosystem label).In
.github/dependabot.yml:target-branch: mainfrom every entry (2 entries).mainis the default branch, so version updates still target it.target-branchwith one that explains why no entry sets it.ignorerules, so security updates change only in their labels.Nothing else changes: compared as data (keys sorted), the new file equals the old one minus
target-branchpluslabelson every entry.Closes #145
Light lane: CI configuration only (Dependabot), no secrets, permissions or release workflow touched, so the reviewer subagents were skipped; I reviewed the diff myself.
Verification
yqparses the new.github/dependabot.yml; everyupdatesentry haslabels: ["type: dependencies"]; notarget-branchis left.yq -o=json 'sort_keys(..)'): only the intended change.CI passedgreen).Declined review findings
None.
Open questions
None.
🤖 Generated with Claude Code
Summary by Sourcery
Ensure all Dependabot pull requests receive the organization’s dependency label and use the default branch configuration.
Enhancements:
type: dependencieslabel, including security updates.target-branchsettings so Dependabot uses the default branch and applies entry-specific options consistently.