Skip to content

ci: add scheduled release-please sweep - #92

Merged
kneshi merged 2 commits into
mainfrom
ci/release-please-schedule
Jul 3, 2026
Merged

kneshi merged 2 commits into
mainfrom
ci/release-please-schedule

Conversation

@kneshi

@kneshi kneshi commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Ensures dependency fix/feat commits that auto-merge via GITHUB_TOKEN still get a release PR.

Changes

  • Add a 6-hourly schedule: trigger to release-please.yml
  • GITHUB_TOKEN merges (Dependabot auto-merge) don't fire the push trigger, so those releases were being skipped; the cron sweep catches them
  • Keeps the app token in the trusted push/dispatch/schedule context (not the Dependabot PR context, where exposing it would be a supply-chain risk)

kneshi added 2 commits July 3, 2026 22:25
fix/feat commits that reach main via a GITHUB_TOKEN merge (e.g. Dependabot
auto-merge) don't fire the push trigger, so no release PR is opened. A
6-hourly cron sweeps for them, keeping the app token in this trusted
context rather than exposing it to the Dependabot PR context.
@kneshi
kneshi merged commit 3c37ac1 into main Jul 3, 2026
14 checks passed
@kneshi
kneshi deleted the ci/release-please-schedule branch July 3, 2026 21:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant