Skip to content

fix dismiss all Dependabot review requests - #337

Merged
Pigbibi merged 1 commit into
mainfrom
agent/dismiss-all-dependabot-review-requests
Jul 20, 2026
Merged

fix dismiss all Dependabot review requests#337
Pigbibi merged 1 commit into
mainfrom
agent/dismiss-all-dependabot-review-requests

Conversation

@Pigbibi

@Pigbibi Pigbibi commented Jul 20, 2026

Copy link
Copy Markdown
Collaborator

Policy

Automatically generated Pigbibi review requests are dismissed only when the request event itself was created by Dependabot. Requests made by maintainers are preserved. Major dependency updates remain open because the existing auto-merge workflow excludes semver-major updates.

What changed

  • support dependabot[bot] and app/dependabot PR authors and event actors
  • react directly to review_requested events
  • serialize per-PR cleanup runs without cancelling the matching event
  • verify the latest paginated timeline request still came from Dependabot immediately before deletion
  • keep API failures visible while treating an already-removed request as success
  • do not checkout or execute PR code

Validation

  • bash syntax check
  • git diff --check

@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown

🤖 Codex PR Review

Merge allowed: No issues found


Review by Codex PR Review bot • PR

Co-Authored-By: Codex <noreply@openai.com>
@Pigbibi
Pigbibi force-pushed the agent/dismiss-all-dependabot-review-requests branch from 24faa46 to 218037c Compare July 20, 2026 06:59

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

(github.actor == 'dependabot[bot]' || github.actor == 'app/dependabot')

P2 Badge Remove the actor gate for manual re-requests

When a maintainer manually re-requests Pigbibi on a Dependabot PR, the review_requested workflow run has that maintainer as github.actor, so this condition skips the only cleanup job and the request remains. This contradicts the stated policy that later manual re-requests should also be dismissed; the actor restriction must be removed (and the script's later preservation check adjusted accordingly).

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@Pigbibi
Pigbibi merged commit bb93a2c into main Jul 20, 2026
4 checks passed
@Pigbibi
Pigbibi deleted the agent/dismiss-all-dependabot-review-requests branch July 20, 2026 07:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant