Skip to content

chore(ci): remove per-repo Dependabot alert workflows - #4384

Merged
nicktrn merged 1 commit into
mainfrom
chore/remove-per-repo-dependabot-alerts
Jul 27, 2026
Merged

chore(ci): remove per-repo Dependabot alert workflows#4384
nicktrn merged 1 commit into
mainfrom
chore/remove-per-repo-dependabot-alerts

Conversation

@claude

@claude claude Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

✅ Checklist

  • I have followed every step in the contributing guide
  • The PR title follows the convention.
  • I ran and tested the code works — n/a, this PR only deletes two workflow files

Summary

Before: two scheduled workflows in this repo posted Dependabot digests to Slack — a critical-alert check every morning at 08:00 UTC, and a summary of all open alerts on Mondays at 08:00 UTC.

After: neither runs. This reporting is handled centrally now, so the two in-repo workflows were duplicating it.

How: deletes .github/workflows/dependabot-critical-alerts.yml and .github/workflows/dependabot-weekly-summary.yml. Both were self-contained — inline shell, no shared scripts or composite actions — so nothing else in .github/ referenced them.

Dependabot itself is unchanged: .github/dependabot.yml, alerts, and version updates all keep working. This removes only the two Slack notifiers.

The ENABLE_DEPENDABOT_ALERTS repository variable existed only to switch these two workflows off. Nothing else reads it, so it can be removed from the repository settings if it's set.


Testing

No runtime code changes — this PR only removes two scheduled workflow files. Verified that nothing else in the repo references either filename, either workflow name, or the ENABLE_DEPENDABOT_ALERTS variable.


Changelog

Removed the two in-repo scheduled workflows that posted Dependabot digests to Slack.

@changeset-bot

changeset-bot Bot commented Jul 27, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 2e61d4e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@nicktrn
nicktrn marked this pull request as ready for review July 27, 2026 09:49
@nicktrn
nicktrn enabled auto-merge (squash) July 27, 2026 09:49

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Open in Devin Review

@nicktrn
nicktrn merged commit 4d8b5d6 into main Jul 27, 2026
27 checks passed
@nicktrn
nicktrn deleted the chore/remove-per-repo-dependabot-alerts branch July 27, 2026 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants