Skip to content

tools: skip dependency update if PR has non-bot commits - #66503

Merged
nodejs-github-bot merged 1 commit into
nodejs:mainfrom
marco-ippolito:tools-skip-update-on-human-commits
Oct 18, 2026
Merged

nodejs-github-bot merged 1 commit into
nodejs:mainfrom
marco-ippolito:tools-skip-update-on-human-commits

Conversation

@marco-ippolito

@marco-ippolito marco-ippolito commented Oct 4, 2026 •

Copy link
Copy Markdown
Member

When a new version of a dependency comes out, it runs create pull request on the existing actions/tools-update-<id> branch. That force-pushes the branch and throws away any commits a collaborator pushed to fix the update, as happened in #66397 and #66146.

This adds a first step that checks the open PR for that branch. If any commit isn't authored by github-bot@iojs.org, the rest of the job is skipped for that dependency and a notice links to the PR. If there's no open PR, or it only has bot commits, the update runs as before.

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/actions
  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added the meta Issues and PRs related to the general management of the project. label Oct 4, 2026
Comment thread .github/workflows/tools.yml Outdated
Comment thread .github/workflows/tools.yml Outdated
Comment thread .github/workflows/tools.yml Outdated
When the tools-deps-update workflow finds a new version of a
dependency, peter-evans/create-pull-request force-pushes the
Action's branch, discarding any commits a collaborator pushed to
the existing PR to fix the update.

On scheduled runs and on manual runs for all dependencies, check
whether the open PR for the Action's branch contains commits not
authored by the bot before running the updater, and if so skip the
update for that dependency instead of overwriting them. A manual run
for a single dependency still updates the PR, as it is assumed to be
an intentional override.

Signed-off-by: Marco Ippolito <marcoippolito54@gmail.com>
Assisted-by: claude:opus-5.5
@marco-ippolito
marco-ippolito force-pushed the tools-skip-update-on-human-commits branch from 2e5f6b4 to f37531c Compare October 18, 2026 09:22
@marco-ippolito
marco-ippolito requested a review from aduh95 October 18, 2026 09:23

@aduh95 aduh95 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Additional suggestion: have the bot comment on the existing PR with a link to the workflow when it skips the update, with the suggestion to run the workflow manually if the existing commits should be overridden

@marco-ippolito marco-ippolito added the commit-queue PRs queued for automated landing through the Commit Queue. label Oct 18, 2026
@nodejs-github-bot
nodejs-github-bot merged commit 947b9a3 into nodejs:main Oct 18, 2026
16 checks passed
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Landed in 947b9a3

@nodejs-github-bot nodejs-github-bot removed the commit-queue PRs queued for automated landing through the Commit Queue. label Oct 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

meta Issues and PRs related to the general management of the project.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants