Skip to content

fix(dependabot): Follow Conventional Commits#312

Merged
piotrzajac merged 3 commits intomasterfrom
fix/dependabot-should-follow-conventional-commits
Apr 12, 2026
Merged

fix(dependabot): Follow Conventional Commits#312
piotrzajac merged 3 commits intomasterfrom
fix/dependabot-should-follow-conventional-commits

Conversation

@piotrzajac
Copy link
Copy Markdown
Collaborator

@piotrzajac piotrzajac commented Apr 12, 2026

Summary

Dependabot should follow conventional commits

Summary by CodeRabbit

  • Chores
    • Standardized Dependabot-generated commit messages to improve commit history clarity. Dependency update commits (including package manager and automation updates) now use consistent prefixes and scopes so automated updates appear with predictable, readable messages. This aligns automated commits with the project’s commit-message conventions and CI validation rules.

Checklist

  • Commit messages follow Conventional Commits (type(scope): description)
  • dotnet build src/Objectivity.AutoFixture.XUnit2.AutoMock.sln passes with no warnings
  • dotnet test src/Objectivity.AutoFixture.XUnit2.AutoMock.sln passes on all framework slices
  • Code coverage remains at least at the level prior the change (verified by Codecov)
  • Mutation score remains at least at the level prior the change (verified by Stryker)
  • New tests follow the GIVEN/WHEN/THEN naming convention and AAA structure (see AGENTS.md)
  • No new [SuppressMessage] without a justification comment
  • No // TODO: comments added — open a GitHub issue instead
  • No new dependencies introduced that are incompatible with the MIT license (verified by FOSSA)

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 12, 2026

📝 Walkthrough

Walkthrough

Added a backlog task to fix Dependabot commit messages to follow Conventional Commits and updated .github/dependabot.yml to set ecosystem-specific commit-message prefixes for nuget and github-actions without include: "scope".

Changes

Cohort / File(s) Summary
Backlog Task Documentation
.backlog/tasks/task-8 - Fix-Dependabot-commit-messages-to-follow-Conventional-Commits.md
New task file describing acceptance criteria and implementation plan to make Dependabot commit messages follow Conventional Commits; marks task Done and references dependency on TASK-3.
Dependabot Configuration
.github/dependabot.yml
Updated two update entries to add commit-message blocks with prefix: "chore(nuget)" for the nuget ecosystem and prefix: "chore(github-actions)" for github-actions; omitted include: "scope".

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

  • Enforce conventional commits #305: Updates Dependabot commit-message prefixes so automated dependency bump commits conform to the repo's Conventional Commits enforcement.
🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description is missing the issue link (Closes #) and a detailed explanation of the changes. While the checklist is mostly complete, the summary section lacks the required context about what was changed and why. Add the GitHub issue number to the 'Closes #' field and provide a brief explanation of the Dependabot configuration changes made in this PR.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and specifically describes the main change: configuring Dependabot to follow Conventional Commits for its commit messages.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/dependabot-should-follow-conventional-commits

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@piotrzajac piotrzajac self-assigned this Apr 12, 2026
Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.backlog/tasks/task-8 -
Fix-Dependabot-commit-messages-to-follow-Conventional-Commits.md:
- Around line 25-26: Update the acceptance criteria entries that currently
expect ecosystem-based scopes (the checklist items referencing "Dependabot NuGet
update commits" and "Dependabot GitHub Actions update commits" and similar
lines) to use Dependabot's actual dependency-type scopes: replace occurrences of
`chore(nuget): ...` and `chore(github-actions): ...` with `chore(deps): bump
...` for production deps and `chore(deps-dev): bump ...` for dev dependencies so
the items (`#1`, `#2` and the other similar lines) reflect Dependabot's
`commit-message.include: scope` behavior.

In @.github/dependabot.yml:
- Line 1: The file's first line "version: 2" currently uses CRLF line endings;
change the file's line endings to LF only (replace CRLF with \n) so YAMLlint
passes — ensure the file is saved/committed with Unix (LF) line endings and no
trailing CR characters remain.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: a7b05407-fd0f-4e9a-b8e2-0bf7e0f6babf

📥 Commits

Reviewing files that changed from the base of the PR and between 4efe7d2 and f2b417e.

📒 Files selected for processing (2)
  • .backlog/tasks/task-8 - Fix-Dependabot-commit-messages-to-follow-Conventional-Commits.md
  • .github/dependabot.yml

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

♻️ Duplicate comments (1)
.github/dependabot.yml (1)

1-1: ⚠️ Potential issue | 🟡 Minor

Normalize this YAML file to LF line endings.

Line 1 still uses CRLF, which will continue failing YAMLlint (expected \n). Please re-save the file with LF-only line endings.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In @.github/dependabot.yml at line 1, The file contains CRLF line endings
causing YAML lint failures for the content starting with "version: 2";
re-save/convert the file to use LF-only line endings (Unix style) so the file
contains '\n' line breaks instead of '\r\n' (e.g., use your editor's EOL
setting, dos2unix, or git config core.autocrlf=false and re-checkout) and commit
the normalized file.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In @.github/dependabot.yml:
- Line 1: The file contains CRLF line endings causing YAML lint failures for the
content starting with "version: 2"; re-save/convert the file to use LF-only line
endings (Unix style) so the file contains '\n' line breaks instead of '\r\n'
(e.g., use your editor's EOL setting, dos2unix, or git config
core.autocrlf=false and re-checkout) and commit the normalized file.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: c3ad3653-bd78-4f3e-b4af-05b70f0f06f5

📥 Commits

Reviewing files that changed from the base of the PR and between f2b417e and dec27b7.

📒 Files selected for processing (2)
  • .backlog/tasks/task-8 - Fix-Dependabot-commit-messages-to-follow-Conventional-Commits.md
  • .github/dependabot.yml

@piotrzajac piotrzajac merged commit dcb4f2a into master Apr 12, 2026
3 checks passed
@piotrzajac piotrzajac deleted the fix/dependabot-should-follow-conventional-commits branch April 12, 2026 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant