chore(dependabot): cap open pull requests per ecosystem - #69
Conversation
Adds `open-pull-requests-limit` to Dependabot update blocks that had no cap, following the estate per-ecosystem cap doctrine (task #37). No other line in the file is touched. Co-Authored-By: Claude Opus 5 <[email protected]> Claude-Session: https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Advanced Run ID: 📒 Files selected for processing (1)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📜 Recent review details⏰ Context from checks skipped due to timeout. (22)
🔇 Additional comments (1)
📝 SummarySummary by CodeRabbit
WalkthroughThe Dependabot configuration now sets explicit open pull request limits for GitHub Actions, Mix, npm, and pip updates. ChangesDependabot limits
Priority: ⬇️ Low Estimated code review effort: 1 (Trivial) | ~2 minutes Merge Risk: ⚪ Minimal · up to This change caps Dependabot pull request volume for GitHub Actions, Mix, npm, and pip updates according to the intended policy. No current merge-readiness risk remains. 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. A rabbit counts the update queue Comment |
|
Adds
open-pull-requests-limitto the Dependabot blocks in this repositorythat did not have one.
Why. Without an explicit limit, Dependabot defaults to 5 open PRs per
ecosystem. Across the estate that produced a large, permanently-refreshing
backlog that costs more to triage than the updates are worth. An estate-wide
audit found 3,024 uncapped blocks across 1,429 config files.
The cap applied here follows the per-ecosystem doctrine already recorded in
rsr-template-repo, not a single flat number: github-actions 2, cargo 0,mix/npm/pip 3.
How this commit was built. The change was made with git plumbing against
origin/<default branch>, not by staging a working tree. The branch thereforecontains exactly one commit touching exactly one file, and carries none of the
unrelated local state present in this checkout. A per-repository assertion
required
git diff --name-only <base> <commit>to equal the expected path setexactly, or the branch was never created.
Repositories whose
HEADalready differed from the base on this file wereskipped, not overwritten, so no unpushed local work is discarded or
silently folded into this PR.
This PR is opened as a draft on purpose. It is part of a bulk campaign and
is not requesting a merge. Review and merge at your discretion.
🤖 Generated with Claude Code
https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk