From 9f64d7b8a7ff9d4f715046704a43036002549141 Mon Sep 17 00:00:00 2001 From: WulfForge Date: Wed, 29 Apr 2026 11:48:08 -0400 Subject: [PATCH 1/2] =?UTF-8?q?ci:=20target=20Dependabot=20PRs=20at=20dev?= =?UTF-8?q?=20(per=20DEV=5FCYCLE.md=20=C2=A74.1)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Adds `target-branch: "dev"` to the pip ecosystem entry so Dependabot opens dependency-bump PRs against `dev`, not the default branch (`main`). DEV_CYCLE.md §4.1 prescribes that all feature/fix PRs target `dev`, including dependency bumps that meet the L1 self-merge bar. PRs #85 and #86 (already-open Dependabot PRs targeting `main`) bypass the integration branch and the dev-tier CI gates. This config change prevents the same drift on future bumps; Jin can decide separately whether to retarget #85/#86 in flight or close + let Dependabot reopen them against `dev`. No effect on existing PRs — Dependabot evaluates this config at the next scheduled run. Risk: L1 (single-key CI config addition). --- .github/dependabot.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6a7695c0..ee9478e9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -2,5 +2,6 @@ version: 2 updates: - package-ecosystem: "pip" directory: "/" + target-branch: "dev" schedule: interval: "weekly" From b4f3cf3c74062c5bcab10f6d8991126862429060 Mon Sep 17 00:00:00 2001 From: WulfForge Date: Wed, 29 Apr 2026 12:06:47 -0400 Subject: [PATCH 2/2] ci: auto-apply flow:feature, dependencies, python labels on Dependabot PRs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Pairs with DEV_CYCLE.md §4.1.1 (added in PR #93) which mandates a flow:* label on every PR. Without this, every weekly Dependabot bump would arrive unlabeled and reviewers would have to apply flow:feature by hand — defeating the "label first, review second" contract. The dependencies + python labels match the convention already used on existing Dependabot PRs (#85, #86) so this only adds flow:feature on top of the historical pattern. --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ee9478e9..36ee1c6e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,3 +5,7 @@ updates: target-branch: "dev" schedule: interval: "weekly" + labels: + - "flow:feature" + - "dependencies" + - "python"