From 3a2c970ea07caadf6525717f122fb1ee7d784cfe Mon Sep 17 00:00:00 2001 From: Souleymene Rouchou Date: Mon, 28 Sep 2026 09:27:44 -0400 Subject: [PATCH 1/2] ci: comment on dependabot major version PRs explaining no auto-merge Co-Authored-By: Claude --- .github/workflows/dependabot-auto-merge.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 124e2ac1..728c599a 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -23,3 +23,10 @@ jobs: env: PR_URL: ${{ github.event.pull_request.html_url }} GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + + - name: Comment on major version updates + if: steps.metadata.outputs.update-type == 'version-update:semver-major' + run: gh pr comment "$PR_URL" --body "This PR bumps a **major** version and will not be auto-merged. Please review breaking changes manually." + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 06fecd07914c3345c91cc43ea72554cdbbacb0e8 Mon Sep 17 00:00:00 2001 From: Souleymene Rouchou Date: Mon, 28 Sep 2026 09:40:02 -0400 Subject: [PATCH 2/2] ci: only comment on major version PRs when opened or reopened Co-Authored-By: Claude --- .github/workflows/dependabot-auto-merge.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 728c599a..3f56aec3 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -25,7 +25,7 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Comment on major version updates - if: steps.metadata.outputs.update-type == 'version-update:semver-major' + if: steps.metadata.outputs.update-type == 'version-update:semver-major' && (github.event.action == 'opened' || github.event.action == 'reopened') run: gh pr comment "$PR_URL" --body "This PR bumps a **major** version and will not be auto-merged. Please review breaking changes manually." env: PR_URL: ${{ github.event.pull_request.html_url }}