Skip to content

chore(ci): auto-merge dependabot PRs#86

Open
janisz wants to merge 4 commits intomainfrom
auto-merge
Open

chore(ci): auto-merge dependabot PRs#86
janisz wants to merge 4 commits intomainfrom
auto-merge

Conversation

@janisz
Copy link
Copy Markdown
Contributor

@janisz janisz commented Mar 23, 2026 •
edited
Loading

Description

Auto-merge dependabot PRs but skip e2e tests auto updates as mcp checker will be green even when not working.

Validation

@janisz
chore(ci): auto-merge dependabot PRs
a477ed7 
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Mar 23, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.88%. Comparing base (9bf4946) to head (b3754df).
⚠️ Report is 16 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main      #86      +/-   ##
==========================================
- Coverage   78.37%   73.88%   -4.49%     
==========================================
  Files          27       30       +3     
  Lines        1216     1302      +86     
==========================================
+ Hits          953      962       +9     
- Misses        223      300      +77     
  Partials       40       40
Flag Coverage Δ
integration 73.88% <ø> (?)
unit 73.88% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@janisz
skip e2e tools
f1950b6 
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
@janisz janisz requested a review from mtodor March 23, 2026 12:26
@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 23, 2026 •
edited
Loading

E2E Test Results

Commit: b3754df
Workflow Run: View Details
Artifacts: Download test results & logs

=== Evaluation Summary ===

  ✓ list-clusters (assertions: 3/3)
  ✓ cve-detected-workloads (assertions: 3/3)
  ✓ cve-detected-clusters (assertions: 3/3)
  ✓ cve-nonexistent (assertions: 3/3)
  ✓ cve-cluster-does-exist (assertions: 3/3)
  ✗ cve-cluster-does-not-exist (assertions: 2/3)
      one or more verification steps failed
      - ToolsUsed: Required tool not called: server=stackrox-mcp, tool=, pattern=list_clusters
  ✓ cve-clusters-general (assertions: 3/3)
  ✓ cve-cluster-list (assertions: 3/3)
  ✓ cve-log4shell (assertions: 3/3)
  ✗ cve-multiple (assertions: 3/3)
      one or more verification steps failed
  ✓ rhsa-not-supported (assertions: 2/2)

Tasks:      9/11 passed (81.82%)
Assertions: 31/32 passed (96.88%)
Tokens:     ~57502 (estimate - excludes system prompt & cache)
MCP schemas: ~12738 (included in token total)
Agent used tokens:
  Input:  10960 tokens
  Output: 24014 tokens
Judge used tokens:
  Input:  88756 tokens
  Output: 89587 tokens

mtodor
mtodor reviewed Mar 26, 2026
View reviewed changes
Copy link
Copy Markdown
Collaborator

@mtodor mtodor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What do you think to add label for directory: "/" and also require that label to be set in order to trigger auto merge?

In that case we will get PRs for both (base go.mod and tools go.mod), but only PRs updating base modules will be auto merged.

@janisz @claude
chore(ci): use auto-merge label for selective PR merging
2352820 
Add label-based control for Dependabot auto-merge instead of excluding
entire modules. Root module dependencies get auto-merge label, while
e2e-tests/tools dependencies require manual review.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
janisz
janisz commented Mar 27, 2026
View reviewed changes
@janisz janisz requested a review from mtodor March 27, 2026 16:54
mtodor
mtodor approved these changes Mar 27, 2026
View reviewed changes
.github/workflows/auto-merge.yml
contains(github.event.pull_request.labels.*.name, 'auto-merge')
steps:
- name: Enable auto-merge for Dependabot PRs
run: gh pr merge --auto --squash "$PR_URL" && gh pr review --approve "$PR_URL"
Copy link
Copy Markdown
Collaborator

@mtodor mtodor Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this order correct? Or it should be approve first then merge?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mtodor mtodor mtodor approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@janisz @codecov-commenter @mtodor