Skip to content

ci: group Dependabot example updates and verify only what changed #844

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
bnusunny wants to merge 24 commits into
base: main
Choose a base branch
from
+1,262 −24
Open

ci: group Dependabot example updates and verify only what changed #844

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
6f8f472
ci: group Dependabot security updates for the examples
bnusunny Sep 13, 2026
52896af
ci: verify only the examples a pull request touches
bnusunny Sep 13, 2026
ccefd41
ci: auto-merge verified example-only Dependabot updates
bnusunny Sep 13, 2026
fa41e92
ci: document the verified Dependabot grouping semantics
bnusunny Sep 13, 2026
f314573
ci: harden the Dependabot auto-merge guards
bnusunny Sep 13, 2026
33c1cb3
ci: grant actions:read, count jobs safely, cover bundler
bnusunny Sep 13, 2026
38e46fd
ci: make Verify Examples self-verifying and gate on every check
bnusunny Sep 14, 2026
9be72a5
ci: keep both fail-safe paths from aborting instead of refusing
bnusunny Sep 14, 2026
1d2aca2
ci: make one-PR-per-example structural, and classify merge failures
bnusunny Sep 14, 2026
3c1ba63
ci: re-evaluate auto-merge on a schedule, and stop swallowing jq
bnusunny Sep 14, 2026
3a3940f
ci: spell out Dependabot's directories, and three review fixes
bnusunny Sep 14, 2026
1d2c360
ci: four review fixes, and a guard against example config drift
bnusunny Sep 14, 2026
b21954d
ci: complete the manifest table, require an open PR, fix a stale comment
bnusunny Sep 14, 2026
bb4e344
ci: grant checks/statuses, fail closed on an absent rollup, widen pus…
bnusunny Sep 14, 2026
399f8a5
Merge branch 'main' into ci/dependabot-grouping-and-targeted-example-…
bnusunny Sep 14, 2026
8ee5b00
ci: shorten the group names, and narrow what counts as shared
bnusunny Sep 14, 2026
8a35cb2
ci: fix two ways the drift guard could lie, and refresh a stale header
bnusunny Sep 14, 2026
b1670c3
ci: merge after approval, not auto-merge on green
bnusunny Sep 14, 2026
f049b3c
ci: let the ruleset decide whether the merge is unattended
bnusunny Sep 14, 2026
b39624c
ci: settle on merge-after-approval, and stop floating a ruleset bypass
bnusunny Sep 14, 2026
fb69e5d
ci: drop the merge automation, leave Dependabot PRs to their owners
bnusunny Sep 15, 2026
0316c21
ci: fail on a missing matrix key, assert the prefix, say what was ver…
bnusunny Sep 15, 2026
e26d40f
ci: assert the matrix entries' shape, and scope the policy keys to ex…
bnusunny Sep 15, 2026
3a96664
ci: no-renames diff, anchor example paths, assert the last two group …
bnusunny Sep 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading