Skip PR review workflow for Dependabot PRs by glours · Pull Request #13679 · docker/compose

glours · 2026-03-26T12:17:25Z

What I did
Dependabot PRs don't have access to the secrets required by the cagent-action reusable workflow, causing the org membership check to fail with "github-token not supplied".

Related issue

(not mandatory) A picture of a cute animal, if possible in relation to what you did

Copilot

Pull request overview

Updates the PR review GitHub Actions workflow to avoid running the reusable cagent-action review job on Dependabot-triggered PR events, preventing failures caused by unavailable secrets on Dependabot PRs.

Changes:

Adds a job-level condition to skip the review reusable-workflow job when the triggering actor is dependabot[bot].

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-26T12:20:16Z


 jobs:
 review:
+ if: github.actor != 'dependabot[bot]'


This if gates on github.actor, which is the user who triggered the event (e.g., the person converting a PR to ready-for-review or re-running workflows), not necessarily the PR author. That means the job can still run on a Dependabot-authored PR if a human triggers ready_for_review (or similar) events, potentially reintroducing the missing-secrets failure. Consider gating specifically on the PR author for pull_request events (e.g., check github.event.pull_request.user.login) while still allowing issue_comment-triggered /review runs.
Suggested change
if: github.actor != 'dependabot[bot]'
if: >
(github.event_name == 'pull_request' && github.event.pull_request.user.login != 'dependabot[bot]') ||
(github.event_name != 'pull_request' && github.actor != 'dependabot[bot]')

glours · 2026-03-26T12:33:10Z

/review

Dependabot PRs don't have access to the secrets required by the cagent-action reusable workflow (CAGENT_ORG_MEMBERSHIP_TOKEN), causing the org membership check to fail with "github-token not supplied". Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Guillaume Lours <glours@users.noreply.github.com>

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [docker/compose](https://github.com/docker/compose) | patch | `v5.1.1` → `v5.1.2` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>docker/compose (docker/compose)</summary> ### [`v5.1.2`](https://github.com/docker/compose/releases/tag/v5.1.2) [Compare Source](docker/compose@v5.1.1...v5.1.2) #### What's Changed ##### 🐛 Fixes - Fix TTY timer rendering when duration length changes by [@MaybeSam05](https://github.com/MaybeSam05) in [#13634](docker/compose#13634) - Fix up attach filtering by [@false200](https://github.com/false200) in [#13664](docker/compose#13664) - Preserve ssh:// URL scheme when resolving Dockerfile path by [@ssam18](https://github.com/ssam18) in [#13669](docker/compose#13669) - Initialize and pass envFiles map in processExtends by [@Mohamed-Moumni](https://github.com/Mohamed-Moumni) in [#13678](docker/compose#13678) - Fix TestRunHook\_ConsoleSize on macOS by [@thaJeztah](https://github.com/thaJeztah) in [#13686](docker/compose#13686) - Restore post-connect fallback for multi-network stacks on API < 1.44 by [@jotka](https://github.com/jotka) in [#13629](docker/compose#13629) - Publish: return api.ErrCanceled when user declines interactive prompts by [@ishwar170695](https://github.com/ishwar170695) in [#13674](docker/compose#13674) - Return error on non-ErrNotExist stat failures in Tar.Sync() by [@Lidang-Jiang](https://github.com/Lidang-Jiang) in [#13684](docker/compose#13684) ##### 🔧 Internal - Refactor: thread context through publish sensitive data check by [@ishwar170695](https://github.com/ishwar170695) in [#13653](docker/compose#13653) - Add AI-powered MR review workflow via `docker/cagent-action` by [@glours](https://github.com/glours) in [#13659](docker/compose#13659) - Update `cagent-action` to latest (with better permissions) by [@derekmisler](https://github.com/derekmisler) in [#13665](docker/compose#13665) - Pin GitHub Actions to commit SHA, remove pr-review workflow by [@glours](https://github.com/glours) in [#13662](docker/compose#13662) - Exclude hook\_test.go from Windows builds and propagate ExecStart error in runWaitExec by [@pawannn](https://github.com/pawannn) in [#13683](docker/compose#13683) - Skip MR review workflow for Dependabot MRs by [@glours](https://github.com/glours) in [#13679](docker/compose#13679) - Use negotiated API version for network setup by [@glours](https://github.com/glours) in [#13690](docker/compose#13690) - Fix mixed assertion libraries in tests by [@thaJeztah](https://github.com/thaJeztah) in [#13689](docker/compose#13689) - Test: use random host port for dind TLS build test by [@ricardobranco777](https://github.com/ricardobranco777) in [#13630](docker/compose#13630) - Remove direct dependency on `docker/docker` by [@glours](https://github.com/glours) in [#13706](docker/compose#13706) ##### ⚙️ Dependencies - Bump github.com/containerd/platforms from `1.0.0-rc.2` to `1.0.0-rc.3` by [@dependabot](https://github.com/dependabot)\[bot] in [#13657](docker/compose#13657) - Bump golangci-lint to `v2.11.3` and configure CLAUDE to use it on change by [@ndeloof](https://github.com/ndeloof) in [#13656](docker/compose#13656) - Bump google.golang.org/grpc from `1.78.0` to `1.79.3` by [@dependabot](https://github.com/dependabot)\[bot] in [#13642](docker/compose#13642) - Bump github.com/moby/patternmatcher from `0.6.0` to `0.6.1` by [@dependabot](https://github.com/dependabot)\[bot] in [#13667](docker/compose#13667) - Bump go.opentelemetry.io/otel/sdk from `1.39.0` to `1.42.0` by [@glours](https://github.com/glours) in [#13663](docker/compose#13663) - Bump github.com/docker/cli from `29.2.1+incompatible` to `29.3.1+incompatible` by [@dependabot](https://github.com/dependabot)\[bot] in [#13670](docker/compose#13670) - Bump github.com/hashicorp/go-version from `1.8.0` to `1.9.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13692](docker/compose#13692) - Bump github.com/docker/buildx `v0.33.0`, buildkit `v0.29.0` by [@thaJeztah](https://github.com/thaJeztah) in [#13693](docker/compose#13693) - Bump google.golang.org/grpc from `1.79.3` to `1.80.0` by [@dependabot](https://github.com/dependabot)\[bot] in [#13697](docker/compose#13697) - Bump github.com/containerd/platforms from `1.0.0-rc.3` to `1.0.0-rc.4` by [@dependabot](https://github.com/dependabot)\[bot] in [#13696](docker/compose#13696) - Bump github.com/moby/moby/client `v0.4.0`, moby/api `v1.54.1` by [@thaJeztah](https://github.com/thaJeztah) in [#13708](docker/compose#13708) - Bump github.com/docker/cli `v29.4.0` by [@thaJeztah](https://github.com/thaJeztah) in [#13707](docker/compose#13707) - Bump compose-go to version `v2.10.2` by [@glours](https://github.com/glours) in [#13705](docker/compose#13705) - Bump to Go `1.25.9` by [@thaJeztah](https://github.com/thaJeztah) in [#13720](docker/compose#13720) #### New Contributors - [@MaybeSam05](https://github.com/MaybeSam05) made their first contribution in [#13634](docker/compose#13634) - [@ishwar170695](https://github.com/ishwar170695) made their first contribution in [#13653](docker/compose#13653) - [@derekmisler](https://github.com/derekmisler) made their first contribution in [#13665](docker/compose#13665) - [@false200](https://github.com/false200) made their first contribution in [#13664](docker/compose#13664) - [@ssam18](https://github.com/ssam18) made their first contribution in [#13669](docker/compose#13669) - [@Mohamed-Moumni](https://github.com/Mohamed-Moumni) made their first contribution in [#13678](docker/compose#13678) - [@pawannn](https://github.com/pawannn) made their first contribution in [#13683](docker/compose#13683) - [@jotka](https://github.com/jotka) made their first contribution in [#13629](docker/compose#13629) - [@Lidang-Jiang](https://github.com/Lidang-Jiang) made their first contribution in [#13684](docker/compose#13684) **Full Changelog**: <docker/compose@v5.1.1...v5.1.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever MR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

glours requested a review from a team as a code owner March 26, 2026 12:17

glours requested review from Copilot and ndeloof March 26, 2026 12:17

glours self-assigned this Mar 26, 2026

glours force-pushed the fix-review-workflow branch from 9b4a58d to d45bfeaCompare March 26, 2026 12:17

Copilotstarted reviewing on behalf of glours March 26, 2026 12:18 View session

CopilotAI reviewed Mar 26, 2026
View reviewed changes

ndeloof previously approved these changes Mar 31, 2026
View reviewed changes

glours dismissed ndeloof’s stale review via c346b22March 31, 2026 08:48

glours force-pushed the fix-review-workflow branch from d45bfea to c346b22Compare March 31, 2026 08:48

glours requested a review from Copilot March 31, 2026 08:49

Copilotstarted reviewing on behalf of glours March 31, 2026 08:50 View session

CopilotAI reviewed Mar 31, 2026
View reviewed changes

ndeloof approved these changes Mar 31, 2026
View reviewed changes

glours enabled auto-merge (rebase) March 31, 2026 08:57

glours merged commit 7aeb90c into mainMar 31, 2026
46 checks passed

glours deleted the fix-review-workflow branch March 31, 2026 08:58

BrewTestBot mentioned this pull request Apr 9, 2026
docker-compose 5.1.2 Homebrew/homebrew-core#276795
Merged

rancherbot mentioned this pull request Apr 10, 2026
rddepman: bump dockerCompose from 5.1.1 to 5.1.2 rancher-sandbox/rancher-desktop#10124
Merged

Navigation Menu

Uh oh!

Skip PR review workflow for Dependabot PRs - #13679

Skip PR review workflow for Dependabot PRs#13679
glours merged 1 commit into
mainfrom
fix-review-workflow

glours commented Mar 26, 2026

Uh oh!

CopilotAI left a comment

Uh oh!

CopilotAIMar 26, 2026

Uh oh!

glours commented Mar 26, 2026

Uh oh!

CopilotAI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

-if: github.actor != 'dependabot[bot]'
+if: >
+(github.event_name == 'pull_request' && github.event.pull_request.user.login != 'dependabot[bot]') ||
+(github.event_name != 'pull_request' && github.actor != 'dependabot[bot]')

Uh oh!

Conversation

glours commented Mar 26, 2026

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

CopilotAIMar 26, 2026

Choose a reason for hiding this comment

Uh oh!

glours commented Mar 26, 2026

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants