intuit / intuit/auto

Default labels conflict with Dependabot

Open
#2,412 1 comment 1 reaction 0 assignees View on GitHub
bug
Dominant language
TypeScript
Stars
2.5k
Forks
221
PR merge metrics
No merged PRs in 30d

Description

Some of the default labels created by `auto` — namely, "major", "minor", and "patch" — happen to have special meaning to [Dependabot](https://docs.github.com/en/code-security/dependabot). Whenever Dependabot creates a pull request for a major version update (e.g., updating a dependency from v3 to v4), if the repository the PR is created in has a "major" label defined, Dependabot will apply the "major" label to that PR (and likewise for "minor" and "patch"), which will affect the version bump level calculated by `auto`, likely in a way that the user does not want. [There is currently no way to stop Dependabot from doing this](https://github.com/dependabot/dependabot-core/issues/3465), so the next best thing would be for `auto` to change its default labels to something that doesn't have meaning to Dependabot. For example, for some of our projects, we use "semver-major", "semver-minor", and "semver-patch".

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.