chore(dependabot): cap open pull requests per ecosystem - #75
Conversation
Adds `open-pull-requests-limit` to Dependabot update blocks that had no cap, following the estate per-ecosystem cap doctrine (task #37). No other line in the file is touched. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Advanced Run ID: 📒 Files selected for processing (1)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📜 Recent review details⏰ Context from checks skipped due to timeout. (24)
🔇 Additional comments (1)
📝 SummarySummary by CodeRabbit
WalkthroughThe Dependabot configuration now limits open pull requests to 2 for GitHub Actions and 3 for mix, npm, and pip. ChangesDependabot pull request limits
Priority: ⬇️ Low Estimated code review effort: 1 (Trivial) | ~2 minutes Merge Risk: ⚪ Minimal · up to This change caps concurrent Dependabot update pull requests for the configured ecosystems without changing auto-merge authorization behavior. The configuration update is ready to merge. 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
Full details: Description checkExplanation The description clearly explains the Dependabot limit changes, rationale, policy, scope, and draft status. However, it does not follow the repository template because it omits the required Summary, Changes, RSR Quality Checklist, Testing, and Screenshots sections, including test results and checklist selections. Resolution Rewrite the description using the repository template. Add the required headings, list the key changes, complete the RSR Quality Checklist, and describe the testing performed. State that screenshots or terminal output are not applicable if none are available.
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. A rabbit checks the update queue Comment |
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
1 participant
Adds
open-pull-requests-limitto the Dependabot blocks in this repositorythat did not have one.
Why. Without an explicit limit, Dependabot defaults to 5 open PRs per
ecosystem. Across the estate that produced a large, permanently-refreshing
backlog that costs more to triage than the updates are worth. An estate-wide
audit found 3,024 uncapped blocks across 1,429 config files.
The cap applied here follows the per-ecosystem doctrine already recorded in
rsr-template-repo, not a single flat number: github-actions 2, cargo 0,mix/npm/pip 3.
How this commit was built. The change was made with git plumbing against
origin/<default branch>, not by staging a working tree. The branch thereforecontains exactly one commit touching exactly one file, and carries none of the
unrelated local state present in this checkout. A per-repository assertion
required
git diff --name-only <base> <commit>to equal the expected path setexactly, or the branch was never created.
Repositories whose
HEADalready differed from the base on this file wereskipped, not overwritten, so no unpushed local work is discarded or
silently folded into this PR.
This PR is opened as a draft on purpose. It is part of a bulk campaign and
is not requesting a merge. Review and merge at your discretion.
🤖 Generated with Claude Code
https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk