Skip to content

chore: add Dependabot cooldown (~3 days) - #977

Open
MitaliBhalla wants to merge 3 commits into
openshift:mainfrom
MitaliBhalla:chore/dependabot-cooldown
Open

chore: add Dependabot cooldown (~3 days)#977
MitaliBhalla wants to merge 3 commits into
openshift:mainfrom
MitaliBhalla:chore/dependabot-cooldown

Conversation

@MitaliBhalla

@MitaliBhalla MitaliBhalla commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Add Dependabot cooldown.default-days: 3 for gomod and docker updates
  • Aligns Path B version updates with MintMaker minimumReleaseAge (~3 days) for supply-chain delay
  • Does not change schedule, auto-merge workflow, or security-update behavior

Test plan

  • Confirm dependabot.yml validates in GitHub Dependabot settings / next Dependabot run
  • Confirm only cooldown was added (no other config drift)

Made with Cursor

Summary by CodeRabbit

  • Chores
    • Updated automated dependency update settings to add a three-day cooldown before proposals are made.
    • Improved linting reliability by running module downloads before lint checks.
    • Increased lint execution timeout to 15 minutes and adjusted golangci-lint concurrency to better utilize available capacity.

Align Path B version updates with MintMaker minimumReleaseAge so
routine bumps wait before Dependabot opens PRs.

Co-authored-by: Cursor <cursoragent@cursor.com>
@coderabbitai

coderabbitai Bot commented Jul 27, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 9007765e-5809-4806-ac26-d829288a42d9

📥 Commits

Reviewing files that changed from the base of the PR and between 4bd416e and 6f15c1f.

📒 Files selected for processing (2)
  • .golangci.yml
  • Makefile
🚧 Files skipped from review as they are similar to previous changes (1)
  • .golangci.yml

Walkthrough

Dependabot Docker and Go module updates now use a three-day cooldown. golangci-lint is configured for two-way concurrency and fifteen-minute runs, while the Makefile downloads Go modules before linting.

Changes

Dependency and lint configuration

Layer / File(s) Summary
Dependabot cooldowns
.github/dependabot.yml
Docker and Go module update entries add cooldown.default-days: 3 with MintMaker alignment comments.
Lint execution settings
.golangci.yml, Makefile
golangci-lint concurrency is set to 2, timeout is set to 15m, and the Makefile downloads Go modules before running lint with a 15m timeout.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: smarthall, wanghaoran1988

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly matches the main change: adding a roughly 3-day Dependabot cooldown.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands.

@openshift-ci

openshift-ci Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: MitaliBhalla

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 27, 2026
@codecov-commenter

codecov-commenter commented Jul 27, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.54%. Comparing base (76dbde8) to head (6f15c1f).

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #977   +/-   ##
=======================================
  Coverage   54.54%   54.54%           
=======================================
  Files          82       82           
  Lines        6308     6308           
=======================================
  Hits         3441     3441           
  Misses       2417     2417           
  Partials      450      450           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@MitaliBhalla

Copy link
Copy Markdown
Contributor Author

/test pull-ci-openshift-backplane-cli-main-lint

CI lint fails with "0 issues" then a 5m timeout under prow load.
Bump the Makefile and .golangci.yml timeouts so the job can finish.

Co-authored-by: Cursor <cursoragent@cursor.com>
@MitaliBhalla

Copy link
Copy Markdown
Contributor Author

/test lint

@MitaliBhalla

Copy link
Copy Markdown
Contributor Author

/retest

Warm the module cache before golangci-lint, raise the timeout to 15m,
and cap concurrency so package loading finishes on the low-CPU lint pod.

Co-authored-by: Cursor <cursoragent@cursor.com>
@MitaliBhalla

Copy link
Copy Markdown
Contributor Author

/test lint

@openshift-ci

openshift-ci Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

@MitaliBhalla: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants