From 993db5db7d2d31c2038ddbb722ca6a37617b2a66 Mon Sep 17 00:00:00 2001 From: Souleymene Rouchou Date: Mon, 28 Sep 2026 09:27:44 -0400 Subject: [PATCH 1/2] ci: comment on dependabot major version PRs explaining no auto-merge Co-Authored-By: Claude --- .github/workflows/dependabot-auto-merge.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 124e2ac1..728c599a 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -23,3 +23,10 @@ jobs: env: PR_URL: ${{ github.event.pull_request.html_url }} GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + + - name: Comment on major version updates + if: steps.metadata.outputs.update-type == 'version-update:semver-major' + run: gh pr comment "$PR_URL" --body "This PR bumps a **major** version and will not be auto-merged. Please review breaking changes manually." + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 8a64757efabd272e4252c25399f0d1dc9304b1d2 Mon Sep 17 00:00:00 2001 From: Souleymene Rouchou Date: Mon, 28 Sep 2026 09:40:02 -0400 Subject: [PATCH 2/2] ci: only comment on major version PRs when opened or reopened Co-Authored-By: Claude --- .github/workflows/dependabot-auto-merge.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 728c599a..3f56aec3 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -25,7 +25,7 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Comment on major version updates - if: steps.metadata.outputs.update-type == 'version-update:semver-major' + if: steps.metadata.outputs.update-type == 'version-update:semver-major' && (github.event.action == 'opened' || github.event.action == 'reopened') run: gh pr comment "$PR_URL" --body "This PR bumps a **major** version and will not be auto-merged. Please review breaking changes manually." env: PR_URL: ${{ github.event.pull_request.html_url }}