Skip to content

Group Dependabot updates by ecosystem - #131

Open
coisa wants to merge 2 commits into
masterfrom
codex/group-dependabot-updates
Open

coisa wants to merge 2 commits into
masterfrom
codex/group-dependabot-updates

Conversation

@coisa

@coisa coisa commented Nov 11, 2026

Copy link
Copy Markdown
Owner

Changes

Configure grouped Dependabot version updates for tracked manifests in this repository.

  • composer (/) · composer-production, composer-development
  • github-actions (/) · github-actions

Validation

  • Parsed and round-tripped Dependabot YAML v2 against the current default-branch manifests.
  • Checked ecosystem directories and reviewed the published file list.
  • Existing registry, security-update, target-branch and ignore policies remain configured.

Dependabot reads the configuration after it lands on the default branch.

Signed-off-by: Felipe Sayão Lobato Abreu <github@mentordosnerds.com>
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 11, 2026 •

Copy link
Copy Markdown
Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-11T05:30:09.674932Z 51ce47e Manual request
🔒 Security Review ✅ Completed 2026-11-11T05:31:11.861301Z 51ce47e Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@github-actions

github-actions Bot commented Nov 11, 2026 •

Copy link
Copy Markdown
Contributor

Changelog

✅ Contribution check passed.

Head: 51ce47e321b538eeb3b4b8884bdb097da173b54b

Base: c0bd18543ad57e9baeb35aabb316d455e8645277

Contribution: 1 new valid fragment(s). Policy: ordinary.

  • group-dependabot-updates.md — changed, patch

    Group Dependabot dependency updates by ecosystem and dependency type.

@github-actions

github-actions Bot commented Nov 11, 2026 •

Copy link
Copy Markdown
Contributor

Code Coverage Report: Only Changed Files listed

Package Base Coverage New Coverage Difference
Overall Coverage 🟢 95.02% 🟢 95.02% ⚪ 0%

Minimum allowed coverage is 80%, this run produced 95.02%

Head: 51ce47e. Tested commit: 83fcf8f. PHP CI run.

Signed-off-by: Felipe Sayão Lobato Abreu <github@mentordosnerds.com>
@coisa coisa added the dependencies Pull requests that update a dependency file label Nov 11, 2026
@coisa

coisa commented Nov 11, 2026

Copy link
Copy Markdown
Owner Author

@codex review

Please review the grouped Dependabot configuration and labels on the current HEAD 51ce47e321b538eeb3b4b8884bdb097da173b54b.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Already looking forward to the next diff.

Reviewed commit: 51ce47e321

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 51ce47e321

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant