chore: fix dependabot labels and add scope tags by Aureliolo · Pull Request #736 · Aureliolo/synthorg

Aureliolo · 2026-03-22T15:04:39Z

Summary

Fix type:ci -> type:infra in dependabot.yml (type:ci label never existed, type:infra covers "CI/CD, tooling, project setup")
Add dependencies label to all ecosystems for unified filtering (gh pr list --label dependencies)
Split npm /web and /site into separate entries so they get distinct scope labels
Add scope labels: scope:web, scope:site, scope:cli, scope:docker for quick visual identification
Delete orphaned javascript label (Dependabot default that was never used since we override labels)

Labels already created on the repo: scope:site, scope:cli, scope:docker, scope:web (updated description).

Test plan

Verify Dependabot picks up the new config and stops complaining about missing type:ci
Confirm new PRs from each ecosystem get the correct label combination

Review

Quick mode (config-only change, no code). No agents run.

🤖 Generated with Claude Code

- Fix type:ci -> type:infra (type:ci label never existed) - Add `dependencies` label to all ecosystems for unified filtering - Split npm /web and /site into separate entries for distinct scope labels - Add scope labels: scope:web, scope:site, scope:cli, scope:docker - Delete orphaned `javascript` label Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

github-actions · 2026-03-22T15:04:47Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

coderabbitai · 2026-03-22T15:04:52Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: b541d000-3bf8-4d54-9e06-531a7efe9625

📥 Commits

Reviewing files that changed from the base of the PR and between 2b60069 and 2cdd205.

📒 Files selected for processing (1)

.github/dependabot.yml

📜 Recent review details

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)

GitHub Check: Analyze (python)

🧰 Additional context used

🧠 Learnings (28)

📓 Common learnings

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T21:32:02.880Z
Learning: Applies to .github/workflows/*.yml : Dependabot: daily updates for uv + github-actions + npm + pre-commit + docker + gomod, grouped minor/patch, no auto-merge. Use `/review-dep-pr` to review Dependabot PRs before merging.

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Use Dependabot for daily dependency updates (uv, github-actions, npm, pre-commit, docker, gomod), grouped minor/patch, no auto-merge

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Use `/review-dep-pr` before merging Dependabot PRs

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T18:17:43.675Z
Learning: Dependabot: auto-updates Docker image digests and versions daily.

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Pre-commit.ci: autoupdate disabled (`autoupdate_schedule: never`) -- Dependabot owns hook version bumps via `pre-commit` ecosystem

📚 Learning: 2026-03-15T21:32:02.880Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T21:32:02.880Z
Learning: Applies to .github/workflows/*.yml : Dependabot: daily updates for uv + github-actions + npm + pre-commit + docker + gomod, grouped minor/patch, no auto-merge. Use `/review-dep-pr` to review Dependabot PRs before merging.

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Use Dependabot for daily dependency updates (uv, github-actions, npm, pre-commit, docker, gomod), grouped minor/patch, no auto-merge

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T18:17:43.675Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T18:17:43.675Z
Learning: Dependabot: auto-updates Docker image digests and versions daily.

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Pre-commit.ci: autoupdate disabled (`autoupdate_schedule: never`) -- Dependabot owns hook version bumps via `pre-commit` ecosystem

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Applies to .github/CHANGELOG.md : Changelog auto-generated in `.github/CHANGELOG.md` (do not edit manually)

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T21:32:02.880Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T21:32:02.880Z
Learning: Applies to .github/cla-signatures.json : CLA signatures stored in .github/cla-signatures.json on the cla-signatures branch (unprotected, so the action can commit directly). CLA check via contributor-assistant/github-action on pull_request_target and issue_comment. Skips Dependabot.

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Use `/review-dep-pr` before merging Dependabot PRs

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Pre-commit hooks: trailing-whitespace, end-of-file-fixer, check-yaml, check-toml, check-json, check-merge-conflict, check-added-large-files, no-commit-to-branch (main), ruff check+format, gitleaks, hadolint (Dockerfile linting)

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T18:17:43.675Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T18:17:43.675Z
Learning: Pre-commit hooks: trailing-whitespace, end-of-file-fixer, check-yaml, check-toml, check-json, check-merge-conflict, check-added-large-files, no-commit-to-branch (main), ruff check+format, gitleaks, hadolint (Dockerfile linting).

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T18:17:43.675Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T18:17:43.675Z
Learning: Pre-push hooks: mypy type-check + pytest unit tests + golangci-lint + go vet + go test (CLI, conditional on cli/**/*.go) (fast gate before push, skipped in pre-commit.ci — dedicated CI jobs already run these).

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Pre-push hooks: mypy type-check + pytest unit tests + golangci-lint + go vet + go test (CLI, conditional on `cli/**/*.go`) -- fast gate before push, skipped in pre-commit.ci

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-14T15:43:05.601Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-14T15:43:05.601Z
Learning: Applies to web/package.json : Web dashboard Node.js 20+; dependencies in web/package.json (Vue 3, PrimeVue, Tailwind CSS, Pinia, VueFlow, ECharts, Axios, vue-draggable-plus, Vitest, ESLint, vue-tsc)

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T18:17:43.675Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T18:17:43.675Z
Learning: Applies to cli/** : CLI: Go 1.26+, dependencies in cli/go.mod (Cobra, charmbracelet/huh).

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T21:32:02.880Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T21:32:02.880Z
Learning: Applies to cli/go.mod : Go CLI dependencies: Go 1.26+, Cobra (commands), charmbracelet/huh (interactive CLI), charmbracelet/lipgloss (styled output).

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T21:32:02.880Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T21:32:02.880Z
Learning: Applies to .github/workflows/cli.yml : CLI workflow: Go lint (golangci-lint + go vet) + test (-race -coverprofile) + build (cross-compile: linux/darwin/windows × amd64/arm64) + govulncheck + fuzz testing (main-only, 30s/target, continue-on-error, matrix over 4 packages). cli-pass gate includes fuzz as informational. GoReleaser release on v* tags. Cosign keyless signing of checksums.txt. SLSA L3 provenance attestations. Sigstore bundle (.sigstore.json) attached. Post-release appends checksums/verification/provenance to draft release notes.

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-16T19:52:03.656Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-16T19:52:03.656Z
Learning: Applies to cli/**/*.go : Lint CLI Go code with golangci-lint and go vet; test with go test -race; check vulnerabilities with govulncheck

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-19T11:19:40.044Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-19T11:19:40.044Z
Learning: CLI workflow (`.github/workflows/cli.yml`) runs Go lint (golangci-lint + go vet) + test (race, coverage) + build (cross-compile matrix) + vulnerability check (govulncheck) + fuzz testing. Cross-compiles for linux/darwin/windows × amd64/arm64. GoReleaser release on v* tags with cosign keyless signing and SLSA L3 attestations.

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-19T11:19:40.044Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-19T11:19:40.044Z
Learning: Applies to go.mod : Maintain Go 1.26+ requirement. Dependencies: Cobra (CLI framework), charmbracelet/huh and charmbracelet/lipgloss (UI), sigstore-go (code signing), go-containerregistry (container image verification), go-tuf (TUF client for Sigstore).

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T21:32:02.880Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T21:32:02.880Z
Learning: Applies to cli/**/*.go : Go CLI (Go 1.26+) uses Cobra for commands, charmbracelet/huh for interactive CLI, charmbracelet/lipgloss for styled output. Cross-platform builds (linux/darwin/windows × amd64/arm64). GoReleaser for releases with cosign keyless signing of checksums.txt. SLSA L3 provenance attestations via actions/attest-build-provenance.

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Applies to cli/**/*.go : Go CLI must use Cobra for command structure, charmbracelet libraries for terminal UI, sigstore-go for signature verification, go-containerregistry for Docker image handling, go-tuf for TUF verification

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Applies to docker/Dockerfile* : Docker images: backend (Chainguard distroless, non-root), web (nginx-unprivileged, SPA + API proxy), sandbox (Python + Node.js, non-root)

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T18:17:43.675Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T18:17:43.675Z
Learning: Applies to docker/{Dockerfile*,compose.yml} : Docker: Backend uses 3-stage build (builder → setup → distroless runtime), Chainguard Python, non-root (UID 65532), CIS-hardened. Web uses nginxinc/nginx-unprivileged, Vue 3 SPA with PrimeVue + Tailwind CSS, SPA routing, API/WebSocket proxy to backend.

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T21:32:02.880Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T21:32:02.880Z
Learning: Applies to .github/workflows/docker.yml : Docker workflow: builds backend + web + sandbox images, pushes to GHCR, signs with cosign. SLSA L3 provenance attestations via actions/attest-build-provenance. Scans: Trivy (CRITICAL = hard fail, HIGH = warn) + Grype (critical cutoff) + CIS Docker Benchmark v1.6.0 compliance (informational). CVE triage via .github/.trivyignore.yaml and .github/.grype.yaml. Images only pushed after scans pass. Triggers on push to main and version tags (v*).

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-19T07:12:14.508Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-19T07:12:14.508Z
Learning: Applies to docker/Dockerfile : Docker: 3-stage build (builder → setup → distroless runtime) for backend, Chainguard Python, non-root (UID 65532), CIS-hardened

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-15T16:38:08.735Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-15T16:38:08.735Z
Learning: Applies to docker/** : Docker build context: single root .dockerignore (both images build with context: .). Tags: CI tags images with version from pyproject.toml ([tool.commitizen].version), semver, and SHA.

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-22T14:41:20.060Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-22T14:41:20.060Z
Learning: Applies to docker/**/* : All Docker files in `docker/` -- Dockerfiles, compose, `.env.example`; single root `.dockerignore`; all images build with `context: .`

Applied to files:

.github/dependabot.yml

📚 Learning: 2026-03-19T07:12:14.508Z

Learnt from: CR
Repo: Aureliolo/synthorg PR: 0
File: CLAUDE.md:0-0
Timestamp: 2026-03-19T07:12:14.508Z
Learning: Applies to docker/Dockerfile.sandbox : Docker sandbox: `synthorg-sandbox` — Python 3.14 + Node.js + git, non-root (UID 10001), agent code execution sandbox

Applied to files:

.github/dependabot.yml

🔇 Additional comments (4)

.github/dependabot.yml (4)

42-42: type:ci → type:infra remap is correct and fixes the missing-label path.

This is a clean correction on Line 42, Line 62, and Line 144 with no behavior regression in update cadence.

Also applies to: 62-62, 144-144

85-86: Splitting npm into /web and /site is a solid improvement.

Line 85 and Line 106 now allow independent scope tagging and clearer triage (scope:web / scope:site) while keeping equivalent policy settings.

Also applies to: 103-107, 121-124

21-21: Label model is now consistent across ecosystems.

Adding dependencies broadly plus scope:cli/scope:docker improves filtering and visual routing without changing update strategy.

Also applies to: 41-41, 61-61, 81-81, 101-101, 122-122, 143-143, 163-165, 186-188, 207-209, 228-230

21-230: This verification requires GitHub CLI authentication (not available in sandbox).

The referenced script needs gh label list credentials to verify labels exist in repository settings. However, the recent commit 2cdd205 ("chore: fix dependabot labels and add scope tags") indicates the labels were recently verified. The 7 labels referenced in the config are:

dependencies

type:chore

type:infra

scope:cli

scope:docker

scope:site

scope:web

Ensure these are created in repository settings before merge, or use the command locally with authentication: gh label list --limit 500 --json name.

Walkthrough

The .github/dependabot.yml configuration was updated to implement more granular labeling and organization of dependency updates. Scope-specific labels were introduced (scope:web, scope:site, scope:cli, scope:docker) to categorize dependencies by their respective areas. The type:ci labels were replaced with type:infra for infrastructure-related ecosystem updates. The npm configuration was refactored from a single entry with multiple directories into separate update blocks for /web and /site, each with distinct scheduling, grouping policies, and PR limits. The dependencies label was added across multiple update blocks for various package managers.

Suggested labels

type:chore

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'chore: fix dependabot labels and add scope tags' accurately describes the main changes: fixing labels and adding scope tags to the dependabot configuration.
Description check	✅ Passed	The description provides detailed context about label fixes, scope tag additions, and configuration reorganization, all of which align with the changes to `.github/dependabot.yml`.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

gemini-code-assist · 2026-03-22T15:04:55Z

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request refines the Dependabot configuration to improve the labeling and organization of dependency update pull requests. The changes standardize labels, correct misconfigurations, and introduce scope-specific tags, which collectively enhance the clarity and filterability of automated dependency updates, making it easier to manage and review them.

Highlights

Dependabot Labeling Correction: Replaced the non-existent type:ci label with type:infra in Dependabot configurations for various package ecosystems, ensuring accurate categorization of infrastructure-related updates.
Unified Dependency Labeling: Introduced a consistent dependencies label across all configured package ecosystems to facilitate unified filtering and tracking of dependency-related pull requests.
Granular NPM Configuration: Split the npm package ecosystem configuration for the /web and /site directories into separate, distinct entries, allowing for more specific management.
Scope-Specific Labeling: Added new scope labels (scope:web, scope:site, scope:cli, scope:docker) to relevant package ecosystem configurations, enabling quick visual identification of the affected project area.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request correctly updates the Dependabot configuration to fix labels, add a new dependencies label, and add scope-specific labels for different parts of the monorepo. The changes are logical and align with the goals described. I have one suggestion to improve the maintainability of the npm configurations by reducing duplication using YAML anchors.

gemini-code-assist · 2026-03-22T15:06:58Z

.github/dependabot.yml

+  - package-ecosystem: npm
+    directory: /site
+    schedule:
+      interval: daily
+      time: "06:00"
+      timezone: Etc/UTC
+    commit-message:
+      prefix: "chore"
+    groups:
+      minor-and-patch:
+        update-types: [minor, patch]
+      major:
+        update-types: [major]
+    open-pull-requests-limit: 10
+    reviewers:
+      - Aureliolo
+    labels:
+      - dependencies
+      - type:chore
+      - scope:site


Splitting the npm configuration is correct for applying separate labels, but it introduces significant duplication between the /web and /site blocks. This makes future maintenance harder as any change to shared settings like schedule or reviewers will need to be applied in multiple places.

To keep the configuration DRY (Don't Repeat Yourself), you can use YAML anchors to define and reuse the common settings. GitHub's parser for dependabot.yml supports this feature.

Example:

# Define a common block at the top level of the file x-npm-common: &npm-common schedule: interval: daily time: '06:00' timezone: Etc/UTC commit-message: prefix: 'chore' groups: minor-and-patch: update-types: [minor, patch] major: update-types: [major] open-pull-requests-limit: 10 reviewers: - Aureliolo updates: - package-ecosystem: npm directory: /web <<: *npm-common labels: - dependencies - type:chore - scope:web - package-ecosystem: npm directory: /site <<: *npm-common labels: - dependencies - type:chore - scope:site

This would make it much easier to manage and update shared settings in the future.

🤖 I have created a release *beep* *boop* --- ## [0.4.7](v0.4.6...v0.4.7) (2026-03-22) ### Features * add system user for CLI-to-backend authentication ([#710](#710)) ([dc6bd3f](dc6bd3f)) * dev channel builds with incremental pre-releases between stable releases ([#715](#715)) ([0e8a714](0e8a714)) * replace hardcoded name pools with Faker multi-locale name generation ([#714](#714)) ([5edc6ec](5edc6ec)) ### Bug Fixes * dev-release tag creation, dependabot coverage, go -C cli convention ([#730](#730)) ([7634843](7634843)) * improve name generation step UX and fix sentinel expansion bug ([#739](#739)) ([f03fd05](f03fd05)) * settings page UX polish -- toggle bug, source badges, form improvements ([#712](#712)) ([d16a0ac](d16a0ac)) * switch dev tags to semver and use same release pipeline as stable ([#729](#729)) ([4df6b9b](4df6b9b)), closes [#713](#713) * unify CLI image discovery and standardize Go tooling ([#738](#738)) ([712a785](712a785)) * use PAT in dev-release workflow to trigger downstream pipelines ([#716](#716)) ([d767aa3](d767aa3)) ### CI/CD * bump astral-sh/setup-uv from 7.4.0 to 7.6.0 in /.github/actions/setup-python-uv in the minor-and-patch group ([#731](#731)) ([7887257](7887257)) * bump the minor-and-patch group with 3 updates ([#735](#735)) ([7cd253a](7cd253a)) * bump wrangler from 4.75.0 to 4.76.0 in /.github in the minor-and-patch group ([#732](#732)) ([a6cafc7](a6cafc7)) * clean up all dev releases and tags on stable release ([#737](#737)) ([8d90f5c](8d90f5c)) ### Maintenance * bump the minor-and-patch group across 2 directories with 2 updates ([#733](#733)) ([2b60069](2b60069)) * bump the minor-and-patch group with 3 updates ([#734](#734)) ([859bc25](859bc25)) * fix dependabot labels and add scope tags ([#736](#736)) ([677eb15](677eb15)) * remove redundant pytest.mark.timeout(30) markers ([#740](#740)) ([9ec2163](9ec2163)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).

gemini-code-assist bot reviewed Mar 22, 2026

View reviewed changes

coderabbitai bot approved these changes Mar 22, 2026

View reviewed changes

Merge branch 'main' into chore/dependabot-labels

22c5eff

Aureliolo merged commit 677eb15 into main Mar 22, 2026
24 checks passed

Aureliolo deleted the chore/dependabot-labels branch March 22, 2026 15:15

Aureliolo mentioned this pull request Mar 22, 2026

chore(main): release 0.4.7 #711

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: fix dependabot labels and add scope tags#736

chore: fix dependabot labels and add scope tags#736
Aureliolo merged 2 commits intomainfrom
chore/dependabot-labels

Aureliolo commented Mar 22, 2026

Uh oh!

github-actions bot commented Mar 22, 2026 •

edited

Loading

Uh oh!

coderabbitai bot commented Mar 22, 2026 •

edited

Loading

Uh oh!

gemini-code-assist bot commented Mar 22, 2026

Uh oh!

gemini-code-assist bot left a comment

Uh oh!

gemini-code-assist bot Mar 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Aureliolo commented Mar 22, 2026

Summary

Test plan

Review

Uh oh!

github-actions bot commented Mar 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Scanned Files

Uh oh!

coderabbitai bot commented Mar 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Suggested labels

Uh oh!

gemini-code-assist bot commented Mar 22, 2026

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist bot Mar 22, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions bot commented Mar 22, 2026 •

edited

Loading

coderabbitai bot commented Mar 22, 2026 •

edited

Loading