fix(ci): skip pr-title validation on dependabot PRs#43
Merged
Conversation
Dependabot genera PR titles con la primera letra del subject capitalizada (ej. "Bump the backend-minor-patch group with 8 updates"), lo cual rompe nuestro subjectPattern `^(?![A-Z]).+$` de pr-title.yml. Falsos negativos en los 3 backend Dependabot PRs (#39, #40, #41) lo evidenciaron. Los commits internos de Dependabot SÍ siguen Conventional Commits ("build(deps): bump foo from X to Y"), así que pasan commits.yml y alimentan changelog.yml correctamente. Sólo el PR title display difiere. Skipear el actor dependabot[bot] mantiene la regla estricta para PRs humanas (donde el title se vuelve commit en Squash y queremos que sea CC válido) y evita el falso negativo en bots.
3 tasks
lucasidev
added a commit
that referenced
this pull request
May 1, 2026
PR #43 intentó skipear pr-title.yml para Dependabot usando `github.actor != 'dependabot[bot]'`. No funcionó: en re-runs (via @dependabot rebase comment), github.actor parece quedar con el initiator del comment, no con el bot. Los runs de #39, #40, #41 siguieron fallando incluso después del rebase. Fix: chequear `github.event.pull_request.user.login` que es el creador del PR, invariante a re-runs/rebases. Para Dependabot PRs ese campo siempre es 'dependabot[bot]'. Verificable en logs de PR #40 run 25201147028: el job ejecutó (no se skipeó), confirmando que la condición github.actor evaluó a true.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Resumen
Bug encontrado al triar la wave de Dependabot:
pr-title.ymlfalla en los 3 backend Dependabot PRs (#39, #40, #41) por título capitalizado. Sus commits SÍ son CC válidos, sólo el title difiere. Skipear el actordependabot[bot]cierra el falso negativo sin debilitar la regla para humanos.Cambios
.github/workflows/pr-title.yml: agregarif: github.actor != 'dependabot[bot]'al job.Tests
Probado
Notas
Después de mergear este PR, los Dependabot PRs en cola pasan a tener PR title check skipped en lugar de failed. Backend group + major bumps quedan listos para mergear (CI backend ya verde). Frontend major bumps van a seguir fallando frontend CI por incompatibilidades reales (TS6, zod4, vitest4, lucide1) — esos los tratamos por separado.