Make WordPress Core

Opened 3 months ago

Closed 3 months ago

Last modified 3 months ago

#64140 closed task (blessed) (fixed)

Remove dependabot configuration

Reported by: desrosj's profile desrosj Owned by: desrosj's profile desrosj
Milestone: 6.9 Priority: normal
Severity: normal Version:
Component: Build/Test Tools Keywords: has-patch
Focuses: Cc:

Description

Since ~February 2024, any branches created by GitHub's Dependabot are being deleted when the wordpress-develop repository's Git mirroring script runs. The result is that each associated PR is closed, and applying or testing any related patch is no longer possible. The side effect is that a new PR is created every time Dependabot runs, regardless of whether there are updates available.

Prior to this date, Dependabot worked as expected without branches being deleted and PRs remained open. Despite working through this with GitHub, the underlying cause of the behavior change is still unknown.

Until this can be solved, the Dependabot configuration file should be removed to avoid unnecessarily running Actions workflows and churning PRs.

Change History (5)

#1 @desrosj
3 months ago

Here are a few Slack conversations that have taken place with some more context:

#2 @desrosj
3 months ago

  • Owner set to desrosj
  • Resolution set to fixed
  • Status changed from new to closed

In 61049:

Build/Test Tools: Remove the dependabot.yml configuration file.

Despite having worked reliably for a few years (first configured in [52241]), the branches and pull requests created by Dependabot are now being deleted and closed after every Git mirror event since early 2024. Since this happens after every commit, the bot is essentially useless in this repository.

This removes the configuration file to avoid unnecessarily creating pull requests and consuming GitHub Actions resources when they will just be closed shortly after.

If the root cause for this change in behavior is discovered and addressed, then re-adding a dependabot.yml file can be considered. For now, you’re just somebody that I used to know.

Props johnbillion, dd32, swissspidy.
Fixes #64140.

This ticket was mentioned in PR #10398 on WordPress/wordpress-develop by @desrosj.


3 months ago
#3

This removes Dependabot-specific conditional statements from GitHub Actions workflows.

Trac ticket: Core-64140.

#4 @desrosj
3 months ago

In 61050:

Build/Test Tools: Remove Dependabot-specific workflow conditions.

Since the bot has been disabled, these conditions are no longer necessary.

Follow up to [61049].
See #64140.

Note: See TracTickets for help on using tickets.