jenkinsci / jenkinsci/github-branch-source-plugin

[JENKINS-70418] deprioritize PRs created by user (dependabot)

Open
#1,414 0 comments 0 reactions 0 assignees View on GitHub
component:github-branch-source-plugin enhancement imported-jira-issue priority:minor resolution:unresolved
Dominant language
Java
Stars
217
Forks
398
Avg merge
30m
Merged PRs (30d)
1

Description

TLDR:

It'd be awesome to be able to deprioritize builds started by Dependabot PRs.  

More Words:

Dependabot (https://github.com/dependabot) (https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/) - once configured, will periodically scan a repo and open PRs to update individual dependencies.  It can, and does, frequently open 50 PRs at once.

If this happened in the middle of the day, on our infrastructure, it would take all day to process our tests for each of these PRs.  This would block normal business.

Ideally, these builds should defer to builds initiated by other users/processes.  In my mind, these should be the least prioritized builds to run next.

In the event a build needs to run by a non-dependabot user, I wouldn't necessarily cancel the dependabot build, but I wouldn't want others to start - thus freeing resources for the "normal" build to run.

Cheers - thanks!

---
Originally reported by jaaasshh, imported from: deprioritize PRs created by user (dependabot)


  • status: Open
  • priority: Minor
  • component(s): github-branch-source-plugin
  • resolution: Unresolved
  • votes: 0
  • watchers: 1
  • imported: 2025-12-02

Raw content of original issue

TLDR:

It'd be awesome to be able to deprioritize builds started by Dependabot PRs.  

More Words:

Dependabot (https://github.com/dependabot) (https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/) - once configured, will periodically scan a repo and open PRs to update individual dependencies.  It can, and does, frequently open 50 PRs at once.

If this happened in the middle of the day, on our infrastructure, it would take all day to process our tests for each of these PRs.  This would block normal business.

Ideally, these builds should defer to builds initiated by other users/processes.  In my mind, these should be the least prioritized builds to run next.

In the event a build needs to run by a non-dependabot user, I wouldn't necessarily cancel the dependabot build, but I wouldn't want others to start - thus freeing resources for the "normal" build to run.

Cheers - thanks!

  • environment: docker: jenkins/jenkins:2.386

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.