Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
|
|
||
| on: | ||
| pull_request_target: | ||
| types: [opened] |
There was a problem hiding this comment.
Workflow only triggers on open, not rebase
High Severity
The pull_request_target trigger only includes types: [opened], but dependabot commonly rebases PRs by force-pushing, which removes the previously committed changeset. Since synchronize isn't in the types list, the workflow won't re-run after a rebase, leaving the PR without a changeset. The script already handles the "changeset already exists" case via fs.existsSync, so adding synchronize would be safe — it would only recreate the changeset when it was lost.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #897 +/- ##
==========================================
+ Coverage 64.96% 65.15% +0.18%
==========================================
Files 207 207
Lines 9626 9593 -33
Branches 1250 1250
==========================================
- Hits 6254 6250 -4
+ Misses 3351 3318 -33
- Partials 21 25 +4 |
kylemcd
requested review from
a team,
MikeCarbone,
andy-knock,
cjbell and
meryldakin
and removed request for
a team
1 participant
Description
Adds a github actions workflow that will automatically create a changest for any dependabot PRs that update an end package dependency.