Add workflow and script to clean Dependabot description bodies

.github/workflows/dependabot-pr-cleaner.yaml

@@ -0,0 +1,75 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: Dependabot PR cleaner
+run-name: >-
+  Clean up description of PR ${{github.event.pull_request.number}} on
+  ${{github.ref_name}} by @${{github.actor}}
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
+      - reopened
+
+  workflow_dispatch:
+    inputs:
+      pr-number:
+        description: 'The PR number of the PR to clean:'
+        required: true
+      debug:
+        description: 'Run with debugging options'
+        type: boolean
+        default: true
+
+# Declare default workflow permissions as read only.
+permissions: read-all
+
+jobs:
+  clean-pr-description:
+    if: >-
+      ${{github.actor == 'dependabot[bot]' &&
+        github.repository_owner == 'quantumlib'}}
+    name: Clean PR description
+    runs-on: ubuntu-slim
+    timeout-minutes: 5
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - name: Check out a copy of the git repository
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        with:
+          sparse-checkout: |
+            ./dev_tools/ci/dependabot_pr_description_cleaner.py
+
+      - name: Set up Python
+        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v5
+        with:
+          cache: pip
+
+      - name: Install dependencies
+        run: pip install html2text
+
+      - name: Clean the PR description
+        env:
+          GH_REPO: ${{github.repository}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          PR_NUMBER: ${{inputs.pr-number || github.event.pull_request.number}}
+          SHELLOPTS: ${{inputs.debug && 'xtrace' || '' }}
+        run: |
+          gh pr view ${{env.PR_NUMBER}} --json body --jq .body > body.txt
+          python3 dev_tools/ci/dependabot_pr_description_cleaner.py body.txt
+          gh pr edit ${{env.PR_NUMBER}} --body-file body.txt

dev_tools/ci/dependabot_pr_description_cleaner.py

@@ -0,0 +1,79 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Convert and streamline description bodies of Dependabot PRs."""
+
+import os
+import re
+import sys
+
+import html2text
+
+
+def process_text(content):
+    """Take PR description body and clean it.
+
+    Cleaning steps applied:
+    * Remove the section "Commits"
+    * Convert HTML to Markdown
+    * Remove the section "Dependabot commands and options"
+    """
+
+    # Pattern: match the start of the details block for Commits, lazy match
+    # until the closing details tag, and match the following br tag if present.
+    content = re.sub(
+        r'<details>\s*<summary>Commits</summary>.*?</details>\s*(<br\s*/?>)?',
+        '',
+        content,
+        flags=re.DOTALL | re.IGNORECASE
+    )
+
+    h = html2text.HTML2Text()
+    h.body_width = 0
+    markdown_content = h.handle(content)
+
+    target_phrase = "Dependabot commands and options"
+    if target_phrase in markdown_content:
+        # Split at the last occurrence of the phrase.
+        parts = markdown_content.rsplit(target_phrase, 1)
+        pre_text = parts[0]
+        pre_text = pre_text.rstrip()
+        # Remove the marker if present at the end.
+        if pre_text.endswith(r'\---'):
+             pre_text = pre_text[:-4]
+        elif pre_text.endswith('---'):
+             pre_text = pre_text[:-3]
+        markdown_content = pre_text.strip()
+
+    return markdown_content
+
+
+def clean_body(file_path):
+    """Reads the file, cleans the text, and writes it back to the same file."""
+    with open(file_path, 'r') as f:
+        content = f.read()
+
+    markdown_content = process_text(content)
+
+    # Write back to file.
+    with open(file_path, 'w') as f:
+        f.write(markdown_content)
+
+
+if __name__ == '__main__':
+    if len(sys.argv) < 2:
+        script_name = os.path.basename(sys.argv[0])
+        print(f"Usage: python3 {script_name} FILE")
+        sys.exit(1)
+    clean_body(sys.argv[1])