Skip to content

ci(deps): stop include:scope doubling the scope the prefixes already carry - #103

Merged
bgard68 merged 1 commit into
mainfrom
fix/dependabot-commit-prefix-scope
Aug 31, 2026
Merged

ci(deps): stop include:scope doubling the scope the prefixes already carry#103
bgard68 merged 1 commit into
mainfrom
fix/dependabot-commit-prefix-scope

Conversation

@bgard68

@bgard68 bgard68 commented Aug 31, 2026

Copy link
Copy Markdown
Owner

Follow-up to #100, which made .github/dependabot.yml take effect again after three weeks of being rejected. With the file finally live, a second problem in the same 2026-08-07 commit became visible.

Every prefix in this file already ends in its own scope — chore(deps), ci(deps), build(docker) — and include: "scope" appends another one. The first PR Dependabot re-titled under the live config merged as:

ci(deps)(deps): bump azure/login from 2.3.0 to 3.0.2

include: "scope" was added on 2026-08-07, the same commit that invalidated the file, so Dependabot never applied it and went on titling from the older config. The doubling has been latent ever since and only appeared once #100 landed.

Removing include: "scope" from all four blocks restores exactly the prefix each block declares:

Ecosystem Before this PR After
nuget chore(deps)(deps): chore(deps):
npm chore(deps)(deps): / chore(dev-deps)(deps-dev): chore(deps): / chore(dev-deps):
github-actions ci(deps)(deps): ci(deps):
docker build(docker)(deps): build(docker):

The alternative — reducing each prefix to a bare type and letting include: rebuild the scope — would drop docker from the Docker prefix and make npm's prefix-development redundant. Keeping the prefixes as authored is the smaller change and preserves what each one was chosen to say.

Also created the four labels this file references that did not exist in the repo — dotnet, frontend, ci, docker — which Dependabot had started reporting on every PR:

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

That warning was also new, and for the same reason: the label list was never read while the config was being rejected.

…carry

Each prefix here already ends in its scope -- chore(deps), ci(deps),
build(docker) -- and include: "scope" appends another one, so the first
pull request written by the now-live config merged as
'ci(deps)(deps): bump azure/login from 2.3.0 to 3.0.2'.

This was invisible until now: include: "scope" arrived on 2026-08-07 in
the same commit that invalidated the file, so Dependabot never applied it
and kept titling from the older config. Dropping it restores exactly the
prefixes each block declares, rather than restating each one bare and
leaving include: to rebuild it.
@bgard68
bgard68 merged commit ef9dcca into main Aug 31, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant