Skip to content

ci: sync dependabot-rebase.yml with canonical org stub - #182

Closed
don-petry wants to merge 0 commit into
mainfrom
claude/issue-179-20260508-1419
Closed

don-petry wants to merge 0 commit into
mainfrom
claude/issue-179-20260508-1419

Conversation

@don-petry

Copy link
Copy Markdown
Contributor

Summary

  • Replaces stale dependabot-rebase.yml with the verbatim canonical stub from petry-projects/.github/standards/workflows/dependabot-rebase.yml
  • Adds the missing schedule trigger (0 */4 * * * — 4-hour safety-net cron that runs even when no pushes to main occur)
  • Updates APP_ID comment to reflect the required contents:write + pull-requests:write permissions
  • Syncs the AGENTS comment block to match the org standard (mentions all three triggers, not just two)

The uses: SHA pin is unchanged — it already references the correct @v1 commit of the reusable workflow.

Closes #179

Test plan

  • Verify CI passes on this PR
  • Confirm the workflow file matches the canonical stub at petry-projects/.github/standards/workflows/dependabot-rebase.yml

Generated with Claude Code

Copilot AI review requested due to automatic review settings May 8, 2026 14:20
@don-petry
don-petry requested a review from a team as a code owner May 8, 2026 14:20
@coderabbitai

coderabbitai Bot commented May 8, 2026 •

Copy link
Copy Markdown

Warning

Rate limit exceeded

@github-actions[bot] has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 59 minutes and 56 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 31f5b538-41be-4c70-8bfd-5209a7c2d34d

📥 Commits

Reviewing files that changed from the base of the PR and between 59bf0bf and e574fa1.

📒 Files selected for processing (1)
  • .github/workflows/dependabot-rebase.yml
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch claude/issue-179-20260508-1419

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@don-petry

Copy link
Copy Markdown
Contributor Author

Self-review complete — no issues found. The diff is minimal: adds the missing schedule trigger and syncs two comment lines to the canonical stub verbatim. The uses: SHA pin, concurrency group, secrets, and permissions are all unchanged.

@petry-projects/org-leads — please review and merge when CI is green.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repository’s Dependabot rebase workflow stub to align with the organization’s standardized thin-caller pattern and adds a periodic trigger so the rebase/merge chain continues even without recent merges to main.

Changes:

  • Updated header comments to match the org-standard AGENTS guidance and permissions notes.
  • Added a 4-hour schedule trigger as a safety net alongside push and workflow_dispatch.
  • Adjusted the job permissions comment to reflect intended update-branch/merge behavior.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/dependabot-rebase.yml Outdated
Comment on lines 46 to 47
pull-requests: write # call update-branch API on behind PRs and merge when ready
uses: petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@b51e2edf830ea085be0277bcf3174c7b3ec8f958 # v1

jobs:
dependabot-rebase:
permissions:
@sonarqubecloud

Copy link
Copy Markdown

@don-petry
don-petry enabled auto-merge (squash) May 12, 2026 01:40
@github-actions

Copy link
Copy Markdown
Contributor

Auto-rebase failed — merge conflict — this branch has conflicts with main that must be resolved manually.

Please resolve the conflicts and push:

git fetch origin
git merge origin/main
# resolve conflicts, then:
git add .
git commit
git push

@don-petry don-petry closed this May 13, 2026
auto-merge was automatically disabled May 13, 2026 17:05

Pull request was closed

@don-petry
don-petry force-pushed the claude/issue-179-20260508-1419 branch from e574fa1 to e86b051 Compare May 13, 2026 17:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Compliance: non-stub-dependabot-rebase.yml

2 participants