Skip to content

fix(ci): strip @mentions from dependabot major version analysis comments#6

Merged
jpr5 merged 1 commit into
mainfrom
fix/dependabot-spam
May 15, 2026
Merged

fix(ci): strip @mentions from dependabot major version analysis comments#6
jpr5 merged 1 commit into
mainfrom
fix/dependabot-spam

Conversation

@jpr5
Copy link
Copy Markdown

@jpr5 jpr5 commented May 15, 2026

Summary

  • Strip @username mentions from upstream release notes before posting as PR comments
  • Prevents notification spam to external open-source contributors
  • Preserves @scope/pkg, email@domain, and action@version patterns

Closes CopilotKit/aimock#216

Test plan

Upstream release notes contain @username references that trigger GitHub
notifications when posted as PR comments. Strip mention-prefix @ from
standalone mentions while preserving @scope/pkg, email@domain, and
action@version patterns.

Closes CopilotKit/aimock#216
@github-actions github-actions Bot added the size/xs PR size: XS label May 15, 2026
@jpr5 jpr5 merged commit 0cf1841 into main May 15, 2026
13 checks passed
@github-actions
Copy link
Copy Markdown

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 42.44% 7169 / 16891
🔵 Statements 41.84% 7602 / 18165
🔵 Functions 40.14% 1273 / 3171
🔵 Branches 41.03% 4803 / 11706
Generated in workflow #19 for commit 71006d9 by the Vitest Coverage Report Action

@jpr5 jpr5 deleted the fix/dependabot-spam branch May 15, 2026 20:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/xs PR size: XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Automated spamming of open source contributor users

1 participant