From d687125e3fe9f31344931db99d11777feac37bbd Mon Sep 17 00:00:00 2001 From: Benoit TRAVERS Date: Tue, 21 Jul 2026 22:38:30 +0200 Subject: [PATCH] ci: remove Dependabot lockfile auto-fix workflow It pushes the regenerated lockfile with the default GITHUB_TOKEN, which does not re-trigger workflow runs, so the checks that failed on Dependabot's mismatched lockfile never re-run and the PR stays blocked. Remove until it can be reintroduced with a token that re-triggers CI (App token / PAT) plus concurrency, rebase-before-push, and a timeout. Refs #98 --- .github/workflows/fix-dependabot-lockfile.yml | 47 ------------------- 1 file changed, 47 deletions(-) delete mode 100644 .github/workflows/fix-dependabot-lockfile.yml diff --git a/.github/workflows/fix-dependabot-lockfile.yml b/.github/workflows/fix-dependabot-lockfile.yml deleted file mode 100644 index fcba2e1..0000000 --- a/.github/workflows/fix-dependabot-lockfile.yml +++ /dev/null @@ -1,47 +0,0 @@ -name: Fix Dependabot Lockfile - -on: - pull_request: - branches: [main] - -permissions: - contents: write - -env: - FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true - -jobs: - fix-lockfile: - name: Fix pnpm lockfile - runs-on: ubuntu-latest - if: github.actor == 'dependabot[bot]' - steps: - - name: Checkout - uses: actions/checkout@v7 - with: - ref: ${{ github.head_ref }} - token: ${{ secrets.GITHUB_TOKEN }} - - - name: Setup pnpm - uses: pnpm/action-setup@v4 - - - name: Setup Node.js - uses: actions/setup-node@v4 - with: - node-version-file: .node-version - cache: pnpm - - - name: Regenerate lockfile - run: pnpm install --no-frozen-lockfile - - - name: Commit lockfile if changed - run: | - git config user.name "github-actions[bot]" - git config user.email "github-actions[bot]@users.noreply.github.com" - git add pnpm-lock.yaml - if git diff --staged --quiet; then - echo "Lockfile already up to date." - else - git commit -m "chore: fix pnpm lockfile catalog specifiers" - git push - fi