Skip to content

fix(ci): switch dependabot to chore(deps) prefix and add deps-dev scope#239

Merged
AbongileBoja merged 1 commit intodevelopfrom
fix/238-dependabot-conventional-commits
Apr 28, 2026
Merged

fix(ci): switch dependabot to chore(deps) prefix and add deps-dev scope#239
AbongileBoja merged 1 commit intodevelopfrom
fix/238-dependabot-conventional-commits

Conversation

@AbongileBoja
Copy link
Copy Markdown
Owner

Summary

Fix

  • .github/dependabot.yml: all three ecosystems (nuget, github-actions, npm) switched to prefix: chore + include: scope. Dependabot will now emit chore(deps): ... and chore(deps-dev): ...
  • .commitlintrc.json: added deps-dev to scope-enum (we already had deps)
  • Validated both messages pass npx commitlint locally; the old deps: form correctly fails

Why structural

Editing PR titles wouldn't help — the lint job (.github/workflows/ci.yml:614-617) runs commitlint --from=base.sha --to=head.sha, validating every commit in the range. Closing and reopening 17 PRs by hand is wasteful churn.

Test plan

  • npx commitlint accepts chore(deps): bump xunit from 2.9.2 to 2.9.3
  • npx commitlint accepts chore(deps-dev): bump @commitlint/cli from 19.8.1 to 20.5.2
  • npx commitlint rejects the legacy deps: bump xunit ... form
  • Dependabot YAML parses cleanly via js-yaml
  • After merge: comment @dependabot recreate on each of the 17 open PRs to regenerate them

Closes #238

Dependabot was emitting commits with `deps:` / `deps-dev:` as the type
prefix, which violates commitlint's type-enum (only the conventional
types are allowed). The lint job in CI runs against every commit in the
PR range, so all 17 open dependabot PRs were blocked at the
"Commit message lint" check.

- .github/dependabot.yml: switch all three ecosystems (nuget, github-
  actions, npm) to `prefix: chore` with `include: scope`. Dependabot
  now emits `chore(deps): ...` for production deps and
  `chore(deps-dev): ...` for dev deps.
- .commitlintrc.json: add `deps-dev` to scope-enum (we already had
  `deps`). Both scopes validated with `npx commitlint`.

After merge, comment `@dependabot recreate` on each open dependabot PR
to regenerate them with the corrected commit messages.

Closes #238
@github-actions
Copy link
Copy Markdown

Code Coverage

Package Line Rate Branch Rate Complexity Health
QuerySpec.Analyzers 93% 84% 133
QuerySpec.Analyzers.CodeFixes 90% 70% 50
QuerySpec.Core 93% 84% 959
QuerySpec.DependencyInjection 92% 75% 43
QuerySpec.EFCore 86% 77% 303
Summary 91% (2118 / 2316) 81% (930 / 1143) 1488

@AbongileBoja AbongileBoja merged commit b97e3d8 into develop Apr 28, 2026
12 checks passed
@AbongileBoja AbongileBoja deleted the fix/238-dependabot-conventional-commits branch April 28, 2026 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: dependabot commit prefix violates commitlint type-enum, blocking 17 PRs

1 participant