Skip to content

fix: tune Dependabot config and fix DCO assistant bugs #534

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
andreatgretel merged 4 commits into from
Apr 13, 2026
Merged

fix: tune Dependabot config and fix DCO assistant bugs #534

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
986aa45
fix: restrict Dependabot pip updates to security-only
andreatgretel Apr 13, 2026
c5bba93
Merge branch 'main' into andreatgretel/fix/dependabot-pip-security-only
andreatgretel Apr 13, 2026
4fede0c
fix: group Dependabot Actions PRs and fix DCO allowlist
andreatgretel Apr 13, 2026
3dd06e7
fix: align DCO assistant if-condition with custom sign-off text
andreatgretel Apr 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,23 +4,30 @@ updates:
directory: /
schedule:
interval: weekly
groups:
all-actions:
patterns:
- "*"
commit-message:
prefix: "ci"
- package-ecosystem: pip
directory: /packages/data-designer-config
schedule:
interval: weekly
open-pull-requests-limit: 0
commit-message:
prefix: "chore"
- package-ecosystem: pip
directory: /packages/data-designer-engine
schedule:
interval: weekly
open-pull-requests-limit: 0
commit-message:
prefix: "chore"
- package-ecosystem: pip
directory: /packages/data-designer
schedule:
interval: weekly
open-pull-requests-limit: 0
commit-message:
prefix: "chore"
4 changes: 2 additions & 2 deletions .github/workflows/dco-assistant.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: "DCO Assistant"
if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the Contributor Agreement including DCO and I hereby sign the Contributor Agreement and DCO') || github.event_name == 'pull_request_target'
if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the DCO document and I hereby sign the DCO.') || github.event_name == 'pull_request_target'
uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Expand All @@ -35,7 +35,7 @@ jobs:
path-to-signatures: "dco-signatures.json"
path-to-document: 'https://github.com/NVIDIA-NeMo/DataDesigner/blob/main/DCO'
branch: 'signatures'
allowlist: dependabot
allowlist: dependabot[bot]
create-file-commit-message: "chore: create file to store dco signatures"
signed-commit-message: "chore: $contributorName has signed the dco in #$pullRequestNo"
custom-notsigned-prcomment: "Thank you for your submission! We ask that $you sign our [Developer Certificate of Origin](https://github.com/NVIDIA-NeMo/DataDesigner/blob/main/DCO) before we can accept your contribution. You can sign the DCO by adding a comment below using this text:"
Expand Down
Loading