Skip to content

ci: drop semver cooldown keys from Dependabot docker entries#136

Merged
dangtony98 merged 1 commit intomainfrom
ci/dependabot-docker-cooldown-fix
Apr 27, 2026
Merged

ci: drop semver cooldown keys from Dependabot docker entries#136
dangtony98 merged 1 commit intomainfrom
ci/dependabot-docker-cooldown-fix

Conversation

@dangtony98
Copy link
Copy Markdown
Contributor

Summary

  • The semver-major-days / semver-minor-days / semver-patch-days cooldown properties aren't supported by Dependabot for package-ecosystem: docker — Docker tags aren't strictly semver.
  • Including them caused Dependabot to reject the entire .github/dependabot.yml, blocking updates for every ecosystem (gomod, npm, github-actions too), not just docker.
  • Drop those three keys from both docker entries (introduced in ci: pin Dockerfile base images by digest + Dependabot docker #131); keep default-days: 7 so docker still respects a cooldown. Other ecosystems are unchanged.

Test plan

  • git diff shows only the six expected line removals across the two docker blocks
  • Dependabot config validation check on the PR turns green
  • No new errors on the Dependabot tab after merge

🤖 Generated with Claude Code

The `semver-major-days` / `semver-minor-days` / `semver-patch-days`
cooldown properties aren't supported for `package-ecosystem: docker`,
which caused Dependabot to reject the entire config and stop running
updates for every ecosystem. Keep `default-days: 7` so docker still
respects a cooldown.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@infisical-review-police
Copy link
Copy Markdown

💬 Discussion in Slack: #pr-review-agent-vault-136-ci-drop-semver-cooldown-keys-from-dependabot-docker-en

Posted by Review Police — reviews, comments, new commits, and CI failures will stream into this channel.

Copy link
Copy Markdown

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Code review skipped — your organization's overage spend limit has been reached.

Code review is billed via overage credits. To resume reviews, an organization admin can raise the monthly limit at claude.ai/admin-settings/claude-code.

Once credits are available, reopen this pull request to trigger a review.

@dangtony98 dangtony98 merged commit 92686cb into main Apr 27, 2026
9 checks passed
@dangtony98 dangtony98 deleted the ci/dependabot-docker-cooldown-fix branch April 27, 2026 03:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant