From 17921713d81a7b1a73bcfb1479949e687988ea2c Mon Sep 17 00:00:00 2001 From: Jennifer Takagi Date: Tue, 20 Oct 2026 16:36:42 +0200 Subject: [PATCH 1/2] ci: rotate the dependabot assignee Dependabot PRs land with no assignee, so nobody owns them. Assign the ones a human has to act on to one of two maintainers, picked by day of year, so the work alternates instead of landing on whoever notices. Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/dependabot-assignee.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/dependabot-assignee.yml diff --git a/.github/workflows/dependabot-assignee.yml b/.github/workflows/dependabot-assignee.yml new file mode 100644 index 0000000..d38c452 --- /dev/null +++ b/.github/workflows/dependabot-assignee.yml @@ -0,0 +1,22 @@ +name: Dependabot assignee + +on: + pull_request: + types: [opened] + +permissions: + issues: write + +jobs: + assign: + runs-on: ubuntu-latest + if: github.actor == 'dependabot[bot]' + steps: + - name: Assign the rotation + run: | + people=(jennifer-takagi jacklaurencegaray) + gh api "repos/${GITHUB_REPOSITORY}/issues/${PR_NUMBER}/assignees" \ + -f "assignees[]=${people[$((10#$(date +%j) % ${#people[@]}))]}" + env: + PR_NUMBER: ${{ github.event.pull_request.number }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 0f1185ac156cdd72dd02f9be3f18eb30e76f9af1 Mon Sep 17 00:00:00 2001 From: Jennifer Takagi Date: Tue, 20 Oct 2026 16:41:48 +0200 Subject: [PATCH 2/2] ci: also grant pull-requests: write to the assign job The assignees REST endpoint is documented against Issues write for issues and Pull requests write for pull requests. Grant both rather than find out on the first major bump. Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/dependabot-assignee.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/dependabot-assignee.yml b/.github/workflows/dependabot-assignee.yml index d38c452..3210cc3 100644 --- a/.github/workflows/dependabot-assignee.yml +++ b/.github/workflows/dependabot-assignee.yml @@ -6,6 +6,7 @@ on: permissions: issues: write + pull-requests: write jobs: assign: