Skip to content

fix(ci): set rebase-strategy: disabled on all Dependabot entries - #901

Merged
sabbour merged 2 commits into
devfrom
fix/dependabot-rebase-strategy
Aug 25, 2026
Merged

fix(ci): set rebase-strategy: disabled on all Dependabot entries#901
sabbour merged 2 commits into
devfrom
fix/dependabot-rebase-strategy

Conversation

@sabbour

@sabbour sabbour commented Aug 25, 2026

Copy link
Copy Markdown
Owner

Stops dependabot rebase storms. With rebase-strategy: auto (the default), every push to dev triggers a rebase on all open Dependabot PRs - causing 5-12 identical CI runs per PR on known-broken dependencies (~3,200-3,700 CI min/mo waste).

Setting disabled means Dependabot only creates/updates a PR when the dependency itself changes, not when dev moves.

Also:

  • Set open-pull-requests-limit: 5 on every ecosystem entry, to bound the queue depth per ecosystem now that rebase-strategy no longer keeps PRs continuously refreshed.
  • Moved the four Docker (base image) entries from weekly to monthly, since patch-level base image bumps don't need weekly churn.
  • NuGet entries already had groups (aspnetcore, azure-sdk, opentelemetry) consolidating related package waves into a single PR per ecosystem.

Copilot AI added 2 commits August 25, 2026 07:33
With rebase-strategy: auto (the default), every push to dev triggers
a rebase on all open Dependabot PRs, causing 5-12 CI runs per branch
on known-broken dependencies. Setting disabled means Dependabot only
opens/updates a PR when the dependency itself changes.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 11857092-1327-41bd-8708-b2ca85e674dd
Per requirement, cap each ecosystem at a max of 5 open Dependabot PRs
to keep the queue bounded now that rebase-strategy is disabled.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 11857092-1327-41bd-8708-b2ca85e674dd
@sabbour
sabbour force-pushed the fix/dependabot-rebase-strategy branch from 1a3d9a3 to 6c16f5e Compare August 25, 2026 14:33
@sabbour
sabbour merged commit 4acfc9a into dev Aug 25, 2026
17 checks passed
@sabbour
sabbour deleted the fix/dependabot-rebase-strategy branch August 25, 2026 14:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants