WordPress.org
Get WordPress

Make WordPress Core

Opened 12 months ago

Closed 12 months ago

Last modified 12 months ago

#64140 closed task (blessed) (fixed)

Remove dependabot configuration

Reported by: desrosj Owned by: desrosj
Priority: normal Milestone: 6.9
Component: Build/Test Tools Version:
Severity: normal Keywords: has-patch
Cc: Focuses:

Description

Since ~February 2024, any branches created by GitHub's Dependabot are being deleted when the wordpress-develop repository's Git mirroring script runs. The result is that each associated PR is closed, and applying or testing any related patch is no longer possible. The side effect is that a new PR is created every time Dependabot runs, regardless of whether there are updates available.

Prior to this date, Dependabot worked as expected without branches being deleted and PRs remained open. Despite working through this with GitHub, the underlying cause of the behavior change is still unknown.

Until this can be solved, the Dependabot configuration file should be removed to avoid unnecessarily running Actions workflows and churning PRs.

Change History (5)

#1 @desrosj
12 months ago

Here are a few Slack conversations that have taken place with some more context:

#2 @desrosj
12 months ago

  • Owner set to desrosj
  • Resolution → fixed
  • Status new → closed

In 61049:

Build/Test Tools: Remove the dependabot.yml configuration file.

Despite having worked reliably for a few years (first configured in [52241]), the branches and pull requests created by Dependabot are now being deleted and closed after every Git mirror event since early 2024. Since this happens after every commit, the bot is essentially useless in this repository.

This removes the configuration file to avoid unnecessarily creating pull requests and consuming GitHub Actions resources when they will just be closed shortly after.

If the root cause for this change in behavior is discovered and addressed, then re-adding a dependabot.yml file can be considered. For now, you’re just somebody that I used to know.

Props johnbillion, dd32, swissspidy.
Fixes #64140.

This ticket was mentioned in ​PR #10398 on ​WordPress/wordpress-develop by ​@desrosj.
12 months ago #3

This removes Dependabot-specific conditional statements from GitHub Actions workflows.

Trac ticket: Core-64140.

#4 @desrosj
12 months ago

In 61050:

Build/Test Tools: Remove Dependabot-specific workflow conditions.

Since the bot has been disabled, these conditions are no longer necessary.

Follow up to [61049].
See #64140.

Note: See TracTickets for help on using tickets.