You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by ha...@apache.org on 2026/08/29 06:30:25 UTC
(superset) 01/02: feat(ci): use native Dependabot semver label auto-assignment to indicate patch-level for auto-approval
This is an automated email from the ASF dual-hosted git repository.
hainenber pushed a commit to branch chore/optimize-dependabot-process
in repository https://gitbox.apache.org/repos/asf/superset.git
commit 5d399aeecafedd04455c65ee3fc93bc4466ecfd0
Author: hainenber <do...@gmail.com>
AuthorDate: Sat Aug 29 13:29:40 2026 +0700
feat(ci): use native Dependabot semver label auto-assignment to indicate patch-level for auto-approval
Signed-off-by: hainenber <do...@gmail.com>
---
.github/workflows/dependabot-auto-approve.yml | 14 +++-----------
1 file changed, 3 insertions(+), 11 deletions(-)
diff --git a/.github/workflows/dependabot-auto-approve.yml b/.github/workflows/dependabot-auto-approve.yml
index 721cf6321d8..247696dd815 100644
--- a/.github/workflows/dependabot-auto-approve.yml
+++ b/.github/workflows/dependabot-auto-approve.yml
@@ -44,20 +44,12 @@ jobs:
permissions:
pull-requests: write # to post the approving review via `gh pr review`
steps:
- - name: Fetch Dependabot metadata
- id: metadata
- # This exact SHA is on ASF Infra's action allowlist
- # (apache/infrastructure-actions approved_patterns.yml) as of this
- # writing. Do not bump without opening an Infra ticket to allow
- # the new SHA first!
- uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
-
+ # Dependabot automatically attaches semver labels (major, minor and patch) to its generated PRs
- name: Approve patch-level bump
- if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
+ if: contains(github.event.pull_request.labels.*.name, 'patch')
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PR_URL: ${{ github.event.pull_request.html_url }}
- DEPENDENCY_NAMES: ${{ steps.metadata.outputs.dependency-names }}
run: |
gh pr review --approve "$PR_URL" \
- --body "Auto-approved: patch-level bump only ($DEPENDENCY_NAMES)."
+ --body "Auto-approved: patch-level bump only."