From 33cb25fc783af664de033b5be1927291f880eef3 Mon Sep 17 00:00:00 2001 From: Bart Waardenburg Date: Thu, 22 Oct 2026 04:52:50 +0200 Subject: [PATCH] ci: check Dependabot merge list fields before a merge Pins the reusable Dependabot workflow to fallow-rs/.github at 2fe02ef95c178680b3f568146cd10ec3a0849af9. The merge step now checks the number and commit of each entry, and squash subjects hold no control characters. A commit lint on pull requests skips bot pull requests, whose commit headers never reach main. Signed-off-by: Bart Waardenburg --- .github/workflows/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index 3396197..25cee73 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -30,7 +30,7 @@ jobs: github.event_name != 'workflow_run' || (github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.event == 'pull_request') - uses: fallow-rs/.github/.github/workflows/dependabot.yml@1327e9c6839faf22da090c263e76d75d2d6a15ed # main + uses: fallow-rs/.github/.github/workflows/dependabot.yml@2fe02ef95c178680b3f568146cd10ec3a0849af9 # main permissions: actions: write checks: read