Skip to content

ci: actively strip major/minor labels from dependabot PRs - #8

Closed
Mirasii wants to merge 1 commit into
mainfrom
dependabot-label-cleanup
Closed

ci: actively strip major/minor labels from dependabot PRs#8
Mirasii wants to merge 1 commit into
mainfrom
dependabot-label-cleanup

Conversation

@Mirasii

@Mirasii Mirasii commented May 1, 2026

Copy link
Copy Markdown
Member

Summary

The previous attempt set labels: [] in dependabot.yml and added an auto-label workflow that applied patch. That did not fully fix the problem because GitHub auto-applies major/minor/patch labels to dependabot PRs whenever those labels exist in the repo — independent of dependabot.yml's labels: setting. PRs were ending up with minor,patch etc.

This PR extends the auto-label workflow to actively remove major and minor before applying patch, and also fires on labeled events so it cleans up labels Dependabot adds shortly after PR creation.

Changes

  • .github/workflows/dependabot-auto-label.yml — also triggers on labeled; removes major and minor before adding patch.
  • (Quote only) .github/workflows/deploy-develop-dependabot.yml — revert the labeled trigger added previously. That workflow has no label check, so the trigger only spawned parallel smoke-test runs racing on the bun.lock push.

Test plan

  • CI passes on this PR.
  • Verify after merge: next Dependabot PR has only the patch label (not minor or major).

🤖 Generated with Claude Code

Setting labels: [] in dependabot.yml does not suppress GitHub's
auto-application of major/minor/patch labels — that behaviour fires
whenever those labels exist in the repository, regardless of the
labels: configuration. The previous workflow only added `patch`
without removing the auto-applied `major`/`minor`, so dependency
PRs ended up multi-labelled and would have driven the wrong
version-bump in deploy.yml's release logic.

- dependabot-auto-label.yml: also fires on `labeled` events and
  actively removes `major` and `minor` before adding `patch`,
  so the patch label ends up as the only version label.
- deploy-develop-dependabot.yml (Quote only): remove the `labeled`
  trigger added in the previous fix. That workflow has no label
  check, so the extra trigger only caused parallel smoke-test runs
  that raced on the bun.lock fast-forward push.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant