Skip to content

Exclude Gradle wrapper from Dependabot updates - #12084

Open
kiview wants to merge 1 commit into
mainfrom
codex/exclude-gradle-wrapper-dependabot
Open

kiview wants to merge 1 commit into
mainfrom
codex/exclude-gradle-wrapper-dependabot

Conversation

@kiview

@kiview kiview commented Sep 17, 2026

Copy link
Copy Markdown
Member

Exclude gradle-wrapper from Dependabot updates so Gradle upgrades do not enter the general dependency batch, as happened in #12067. Wrapper upgrades remain handled by the existing dedicated Update Gradle Wrapper workflow.

Add the exclusion to the root, examples, and smoke-test entries. The examples and smoke-test builds include the root build, so their scans also discover its wrapper. Existing dependency exclusions and the dedicated workflow remain unchanged.

Summary by CodeRabbit

  • Chores
    • Adjusted automated dependency update settings so Gradle wrapper upgrades are handled through the dedicated workflow.

Keep wrapper upgrades out of dependency batches and leave them to the
existing dedicated workflow. Ignore the wrapper in root, examples, and
smoke-test entries, including scans of the root composite build.
@coderabbitai

coderabbitai Bot commented Sep 17, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Advanced

Run ID: f3e74f97-018a-45e6-adb0-ce556088c965

📥 Commits

Reviewing files that changed from the base of the PR and between 8e54951 and 213c89b.

📒 Files selected for processing (1)
  • .github/dependabot.yml

Included review availability: Your plan provides up to 8 included reviews per hour; 7 remain after this review.


📝 Walkthrough

Walkthrough

Dependabot now ignores gradle-wrapper updates in the root, /examples, and /smoke-test Gradle update blocks. A comment states that wrapper upgrades use the separate Update Gradle Wrapper workflow.

Changes

Gradle Wrapper Update Coordination

Layer / File(s) Summary
Dependabot wrapper exclusions
.github/dependabot.yml
The root, /examples, and /smoke-test Gradle update blocks now ignore gradle-wrapper updates.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: eddumelendez

Merge Risk: ⚪ Minimal · up to 213c8

This configuration change keeps wrapper upgrades on the dedicated workflow without introducing an established runtime or delivery risk.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly and concisely describes the main change: excluding the Gradle wrapper from Dependabot updates.
Description check ✅ Passed The description explains the change, its context, affected Dependabot entries, and the existing workflow that remains responsible for wrapper upgrades.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@kiview
kiview marked this pull request as ready for review September 18, 2026 07:46
@kiview
kiview requested a review from a team as a code owner September 18, 2026 07:46
@kiview
kiview enabled auto-merge (squash) September 18, 2026 07:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant