[CI] Add manual pre-commit hook to validate the dependabot config#12932
[CI] Add manual pre-commit hook to validate the dependabot config#12932jbampton wants to merge 1 commit intoapache:mainfrom
Conversation
|
@blueorangutan package |
|
@jbampton a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #12932 +/- ##
=========================================
Coverage 18.02% 18.02%
- Complexity 16464 16465 +1
=========================================
Files 5973 5973
Lines 537466 537466
Branches 65991 65991
=========================================
+ Hits 96853 96855 +2
+ Misses 429690 429689 -1
+ Partials 10923 10922 -1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 17309 |
|
@jbampton , I have found dependabot to be generally useless in this repo (works fine in the website repo). Will this improve the updates as well? |
There was a problem hiding this comment.
Pull request overview
Adds a manual pre-commit hook to validate the repository’s Dependabot configuration, helping catch invalid .github/dependabot.yml changes before they’re committed.
Changes:
- Introduces a new local, manual-stage pre-commit hook to validate
.github/dependabot.ymlvia@bugron/validate-dependabot-yaml.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| entry: npx @bugron/validate-dependabot-yaml@0.3.3 | ||
| language: system |
There was a problem hiding this comment.
Using language: system with an npx ...@0.3.3 entry makes this hook depend on whatever Node/npm/npx happens to be installed on the developer machine (and may not run at all if npx isn’t available/in PATH). To make the manual hook reproducible and cross-platform, configure it as a language: node hook with additional_dependencies: ['@bugron/validate-dependabot-yaml@0.3.3'] and set entry to the installed CLI (so pre-commit manages the Node environment and caching).
| entry: npx @bugron/validate-dependabot-yaml@0.3.3 | |
| language: system | |
| entry: validate-dependabot-yaml | |
| language: node | |
| additional_dependencies: ['@bugron/validate-dependabot-yaml@0.3.3'] |
https://www.npmjs.com/package/@bugron/validate-dependabot-yaml
refs #12930
Description
This PR adds another check or test to our pre-commit framework.
refs apache/sedona#2793
Types of changes
Feature/Enhancement Scale or Bug Severity
Feature/Enhancement Scale
Bug Severity
Screenshots (if appropriate):
How Has This Been Tested?
Ran the manual hooks with pre-commit"
pre-commit run --all-files --hook-stage manualRan the standard pre-commit hooks:
pre-commit run --all-filesHow did you try to break this feature and the system with this change?