chore: move gitignore - #832
Conversation
|
Warning Review limit reached
More reviews will be available in 47 minutes and 17 seconds. Learn how PR review limits work. To continue reviewing without waiting, enable usage-based billing in the billing tab. ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits. 🚦 How do rate limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan refill rate. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, the refill rate gradually slows as usage increases. The highest same-day bursts are limited more strictly. Please see our Fair Usage Limits Policy for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (2)
📝 WalkthroughWalkthroughRemoves the ChangesGit Ignore: External → Local Template
Firefox Cask Force Install
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Possibly related PRs
Suggested labels
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Code Review
This pull request replaces the external gitignore configuration with a local template file (chezmoi/private_dot_config/git/ignore.tmpl) and adds a force argument to the Firefox cask installation in the Homebrew script. The review feedback highlights two issues: first, Go templates do not support the elif keyword, which will cause a parsing error in the new gitignore template; second, forcing the installation of the Firefox cask will significantly slow down updates by reinstalling it on every run.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
| MobileBackups.trash | ||
| tmbootpicker.efi | ||
|
|
||
| {{ elif eq .chezmoi.os "windows" -}} |
| cask "adguard" | ||
| cask "brave-browser" | ||
| cask "firefox" | ||
| cask "firefox", args: { force: true } |
There was a problem hiding this comment.
Using args: { force: true } for firefox will cause Homebrew to reinstall Firefox every time brew bundle is executed. Since this script runs on every chezmoi apply, this will significantly slow down your updates. Consider removing args: { force: true } unless there is a specific, unavoidable reason to force reinstallation.
cask "firefox"
✅MegaLinter analysis: Success
Notices📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining See detailed reports in MegaLinter artifacts Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining
|
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| ✅ BASH | shellcheck | 3 | 0 | 0 | 0.36s | |
| ✅ BASH | shfmt | 3 | 0 | 0 | 0 | 0.02s |
| ✅ COPYPASTE | jscpd | yes | no | no | 0.89s | |
| ✅ JSON | prettier | 1 | 0 | 0 | 0 | 0.41s |
| ✅ JSON | v8r | 1 | 0 | 0 | 2.22s | |
| ✅ REPOSITORY | gitleaks | yes | no | no | 1.83s | |
| ✅ REPOSITORY | git_diff | yes | no | no | 0.01s | |
| ✅ REPOSITORY | grype | yes | no | no | 48.14s | |
| osv-scanner | yes | 1 | no | 0.14s | ||
| ✅ REPOSITORY | secretlint | yes | no | no | 1.2s | |
| ✅ REPOSITORY | syft | yes | no | no | 2.45s | |
| ✅ REPOSITORY | trivy | yes | no | no | 10.55s | |
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 0.12s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 4.32s | |
| ✅ YAML | prettier | 10 | 0 | 0 | 0 | 0.56s |
| ✅ YAML | v8r | 10 | 0 | 0 | 7.85s | |
| ✅ YAML | yamllint | 10 | 0 | 0 | 0.72s |
Detailed Issues
⚠️ REPOSITORY / osv-scanner - 1 error
Scanning dir .
Starting filesystem walk for root: /
End status: 46 dirs visited, 141 inodes visited, 0 Extract calls, 3.404563ms elapsed, 3.404754ms wall time
No package sources found, --help for usage information.
Notices
📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters BASH_SHELLCHECK,BASH_SHFMT,COPYPASTE_JSCPD,JSON_V8R,JSON_PRETTIER,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| ✅ BASH | bash-exec | 3 | 0 | 0 | 0.01s | |
| ✅ BASH | shellcheck | 3 | 0 | 0 | 0.11s | |
| ✅ REPOSITORY | checkov | yes | no | no | 25.73s | |
| ✅ REPOSITORY | devskim | yes | no | no | 1.75s | |
| ✅ REPOSITORY | dustilock | yes | no | no | 0.02s | |
| ✅ REPOSITORY | gitleaks | yes | no | no | 1.35s | |
| ✅ REPOSITORY | grype | yes | no | no | 55.65s | |
| ✅ REPOSITORY | kingfisher | yes | no | no | 7.31s | |
| osv-scanner | yes | 1 | no | 0.12s | ||
| ✅ REPOSITORY | secretlint | yes | no | no | 1.65s | |
| ✅ REPOSITORY | semgrep | yes | no | no | 25.81s | |
| ✅ REPOSITORY | syft | yes | no | no | 2.06s | |
| ✅ REPOSITORY | trivy | yes | no | no | 12.79s | |
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 0.19s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 5.86s |
Detailed Issues
⚠️ REPOSITORY / osv-scanner - 1 error
Scanning dir .
Starting filesystem walk for root: /
End status: 46 dirs visited, 141 inodes visited, 0 Extract calls, 2.652807ms elapsed, 2.652987ms wall time
No package sources found, --help for usage information.
Notices
📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters BASH_EXEC,BASH_SHELLCHECK,REPOSITORY_CHECKOV,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SEMGREP,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER

Show us your support by starring ⭐ the repository
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| ✅ ACTION | actionlint | 5 | 0 | 0 | 0.34s | |
| ✅ ACTION | zizmor | 5 | 0 | 0 | 0 | 0.75s |
| ✅ BASH | bash-exec | 3 | 0 | 0 | 0.01s | |
| ✅ BASH | shellcheck | 3 | 0 | 0 | 0.1s | |
| ✅ BASH | shfmt | 3 | 0 | 0 | 0 | 0.02s |
| ✅ COPYPASTE | jscpd | yes | no | no | 0.76s | |
| ✅ EDITORCONFIG | editorconfig-checker | 60 | 0 | 0 | 0.06s | |
| ✅ JSON | prettier | 1 | 0 | 0 | 0 | 0.34s |
| ✅ JSON | v8r | 1 | 0 | 0 | 2.22s | |
| ✅ MARKDOWN | markdownlint | 4 | 0 | 0 | 0 | 0.77s |
| ✅ MARKDOWN | markdown-table-formatter | 4 | 0 | 0 | 0 | 0.19s |
| ✅ REPOSITORY | checkov | yes | no | no | 28.0s | |
| ✅ REPOSITORY | gitleaks | yes | no | no | 1.47s | |
| ✅ REPOSITORY | git_diff | yes | no | no | 0.01s | |
| ✅ REPOSITORY | grype | yes | no | no | 58.17s | |
| osv-scanner | yes | 1 | no | 0.16s | ||
| ✅ REPOSITORY | secretlint | yes | no | no | 1.21s | |
| ✅ REPOSITORY | semgrep | yes | no | no | 27.0s | |
| ✅ REPOSITORY | syft | yes | no | no | 1.9s | |
| ✅ REPOSITORY | trivy | yes | no | no | 13.69s | |
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 0.25s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 4.83s | |
| ✅ SPELL | lychee | 17 | 0 | 0 | 1.22s | |
| ✅ YAML | prettier | 10 | 0 | 0 | 0 | 0.6s |
| ✅ YAML | v8r | 10 | 0 | 0 | 7.93s | |
| ✅ YAML | yamllint | 10 | 0 | 0 | 0.42s |
Detailed Issues
⚠️ REPOSITORY / osv-scanner - 1 error
Scanning dir .
Starting filesystem walk for root: /
End status: 46 dirs visited, 141 inodes visited, 0 Extract calls, 3.270138ms elapsed, 3.270317ms wall time
No package sources found, --help for usage information.
Notices
📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,COPYPASTE_JSCPD,EDITORCONFIG_EDITORCONFIG_CHECKER,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SEMGREP,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@chezmoi/private_dot_config/git/ignore.tmpl`:
- Line 63: The chezmoi template at line 63 uses an invalid `elif` keyword which
is not supported in Go templates and causes template rendering to fail. Replace
the `elif` construct with `else if` in the conditional statement that checks eq
.chezmoi.os "windows" to use the correct Go template syntax for conditional
chaining.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro Plus
Run ID: 8d18f8df-1147-4aa2-bfae-57806cf29ad9
📒 Files selected for processing (3)
chezmoi/.chezmoiexternal.toml.tmplchezmoi/.chezmoiscripts/run_before_brew_install.sh.tmplchezmoi/private_dot_config/git/ignore.tmpl
💤 Files with no reviewable changes (1)
- chezmoi/.chezmoiexternal.toml.tmpl
Summary by CodeRabbit
Release Notes