Conversation
There was a problem hiding this comment.
Pull request overview
Updates the merge-bot workflow to refine Dependabot auto-merge behavior, aiming to allow GitHub Actions updates while preventing potentially breaking major NuGet upgrades.
Changes:
- Adjusted Dependabot merge condition to permit GitHub Actions updates even when they are semver-major.
- Added inline documentation clarifying the intended merge behavior for GitHub Actions vs NuGet.
…ile skipping major NuGet updates
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
Updates the merge-bot workflow so it auto-merges GitHub Actions (and other ecosystems) updates while preventing auto-merge of major NuGet updates to reduce risk of breaking changes.
Changes:
- Add documentation explaining why major NuGet updates are excluded from auto-merge.
- Update the merge step condition to only block
nuget+semver-major, allowing all other update types/ecosystems to proceed.
There was a problem hiding this comment.
Pull request overview
Updates the Dependabot auto-merge workflow to allow major updates for non-NuGet ecosystems (notably GitHub Actions), while continuing to block major version updates for NuGet to reduce breaking-change risk.
Changes:
- Adjusted merge condition to allow major updates when
package-ecosystemis notnuget. - Kept the existing restriction that NuGet major updates (
version-update:semver-major) are not auto-merged. - Added clarifying comments documenting the new merge rules.
Enhance the merge conditions to include updates for GitHub Actions while excluding major version NuGet updates to prevent potential breaking changes.