Skip to content

ci: stop queueing auto-merge for Dependabot PRs - #325

Merged
imran-siddique merged 1 commit into
mainfrom
ci/drop-dependabot-auto-merge
Oct 15, 2026
Merged

imran-siddique merged 1 commit into
mainfrom
ci/drop-dependabot-auto-merge

Conversation

@imran-siddique

Copy link
Copy Markdown
Member

Removes .github/workflows/dependabot-auto-merge.yml, added in #317.

Main's only required check is gate, which checks for a current-head maintainer approval and not test results. @noah-ing raised this on cmcp#756. In cmcp, ca2a and trace-spec the fix is to require the test jobs. integrations has no single CI workflow to require: each integration's tests run on their own path filter, so a required check would hang on PRs that never trigger it. A queued auto-merge here could land a Dependabot update with red tests.

The minor/patch grouping from #317 stays. A maintainer merges the weekly group after reading its checks. This supersedes #324, which tightens the same workflow.

Main requires only the maintainer gate, which checks approval and not test results. integrations has no single CI workflow to require, since each integration's tests run on its own path filter, so a queued auto-merge could land an update whose tests are red. Grouping stays; merging goes back to a maintainer who has read the checks.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Imran Siddique <45405841+imran-siddique@users.noreply.github.com>
@imran-siddique
imran-siddique requested review from a team and carloshvp as code owners October 15, 2026 05:02
@imran-siddique
imran-siddique merged commit 55e4eb1 into main Oct 15, 2026
29 checks passed
@imran-siddique
imran-siddique deleted the ci/drop-dependabot-auto-merge branch October 15, 2026 06:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants