Skip to content

Dependabot auto-merge: retry the merge, then dispatch a targeted deploy - #74

Merged
Hitesh-Sisara merged 1 commit into
mainfrom
ci/dependabot-merge-retry-deploy
Sep 26, 2026
Merged

Hitesh-Sisara merged 1 commit into
mainfrom
ci/dependabot-merge-retry-deploy

Conversation

@Hitesh-Sisara

Copy link
Copy Markdown
Contributor

Summary

Two gaps from the first real auto-merges (#64, #65, #66):

Merge race. The worker group PR failed with Base branch was modified. Review and try the merge again. because the other two groups merged seconds earlier. The merge step now retries up to five times, 30 s apart, and pins --match-head-commit so a head that moved after the checks were evaluated is never merged.

Nothing deployed. #64 (content-worker) and #65 (dashboard) merged but no Deploy, Worker, or Dashboard run appeared on main. A merge made with GITHUB_TOKEN does not fire push-triggered workflows. workflow_dispatch is the documented exception, so after a successful merge the job now dispatches deploy.yml for exactly the parts the PR touched. deploy.yml gains api, content, dashboard boolean inputs for that; the human-facing all=true default is unchanged. Because deploy.yml runs typecheck and tests before each deploy, CI coverage on main is preserved as well.

The two undeployed bumps were deployed by a manual all=true dispatch alongside this PR, and #66 was merged by hand.

Tested

  • actionlint passes.
  • The expression change in deploy.yml evaluates inputs.api == true to false on push events (inputs are empty there), so push behaviour is unchanged.
  • Real validation is the next grouped Dependabot PR.

…ards

Two gaps showed up on the first real auto-merges. The worker group PR failed
with 'Base branch was modified' because the other two groups merged seconds
earlier; the merge now retries up to five times and pins --match-head-commit
so a head that moved after the checks is never merged.

The two PRs that did merge never deployed: a merge made with GITHUB_TOKEN does
not fire push-triggered workflows. workflow_dispatch is the exception, so the
job now dispatches deploy.yml for the parts the PR touched. deploy.yml gains
per-part inputs (api, content, dashboard) so a content-worker bump does not
redeploy the API and dashboard; the human-facing all=true default is unchanged.
@Hitesh-Sisara
Hitesh-Sisara merged commit e013a37 into main Sep 26, 2026
2 checks passed
@Hitesh-Sisara
Hitesh-Sisara deleted the ci/dependabot-merge-retry-deploy branch September 26, 2026 03:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant