Conversation
There was a problem hiding this comment.
Pull request overview
Updates the merge-bot workflow to refine Dependabot auto-merge behavior, aiming to allow GitHub Actions updates while preventing potentially breaking major NuGet upgrades.
Changes:
- Adjusted Dependabot merge condition to permit GitHub Actions updates even when they are semver-major.
- Added inline documentation clarifying the intended merge behavior for GitHub Actions vs NuGet.
Uh oh!
There was an error while loading. Please reload this page.
…ile skipping major NuGet updates
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
Updates the merge-bot workflow so it auto-merges GitHub Actions (and other ecosystems) updates while preventing auto-merge of major NuGet updates to reduce risk of breaking changes.
Changes:
- Add documentation explaining why major NuGet updates are excluded from auto-merge.
- Update the merge step condition to only block
nuget+semver-major, allowing all other update types/ecosystems to proceed.
Uh oh!
There was an error while loading. Please reload this page.
There was a problem hiding this comment.
Pull request overview
Updates the Dependabot auto-merge workflow to allow major updates for non-NuGet ecosystems (notably GitHub Actions), while continuing to block major version updates for NuGet to reduce breaking-change risk.
Changes:
- Adjusted merge condition to allow major updates when
package-ecosystemis notnuget. - Kept the existing restriction that NuGet major updates (
version-update:semver-major) are not auto-merged. - Added clarifying comments documenting the new merge rules.
Uh oh!
There was an error while loading. Please reload this page.
Enhance the merge conditions to include updates for GitHub Actions while excluding major version NuGet updates to prevent potential breaking changes.