Skip to content

ci: stop auto-approving Renovate PRs - #94

Merged
yocaba merged 1 commit into
mainfrom
chore/disable-renovate-auto-approve
Nov 6, 2026
Merged

yocaba merged 1 commit into
mainfrom
chore/disable-renovate-auto-approve

Conversation

@yocaba

@yocaba yocaba commented Nov 5, 2026 •

Copy link
Copy Markdown
Contributor

What

Removes the renovate-auto-approve stub, so Renovate PRs need a human approval before they merge.

Part of #93

Why

Auto-merge waits only for required checks, and the e2e tests aren't among them: opendefensecloud/solution-arsenal#914 was auto-approved and merged while e2e was still running, and one e2e job failed after the merge. Until the merge waits for every check, a human approves Renovate PRs once all checks are green.

Notes for reviewers

  • Renovate still enables auto-merge, so an approved PR merges as soon as the required checks pass. Approve once every check is green.
  • No open Renovate PR carries an automated approval.

Checklist

  • Tests added/updated, or confirmed that no tests are required
  • No breaking changes, or upgrade path documented above
  • Readable commit history (squashed and cleaned up as desired)
  • AI code review considered and comments resolved

Summary by CodeRabbit

  • Chores
    • Removed an automated workflow that approved certain Renovate pull requests.
    • Clarified that a workflow reference uses the local version and exercises the branch version; workflow behavior is unchanged.

@coderabbitai

coderabbitai Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

Explain Change →

No actionable comments were generated in the recent review.

Walkthrough

The PR removes the Renovate auto-approval workflow and updates a comment in the flake closure diff workflow. The comment change does not alter workflow behavior.

Changes: Workflow cleanup

Layer / File(s) Summary
Remove the Renovate auto-approval workflow and update the workflow note
.github/workflows/renovate-auto-approve-self.yml, .github/workflows/flake-closure-diff-self.yml
The Renovate-triggered workflow that called the local reusable auto-approval workflow is deleted. A comment now describes the flake closure diff workflow reference as local.

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other · Severity of issue fixed: Medium

Possibly related issues

  • Issue 93: The PR removes the automated approval path described in the issue, but does not implement the broader check-completion condition.
  • Issue 92: The PR removes the renovate-auto-approve workflow run, but does not apply the issue’s broader concurrency and trigger changes.

Suggested reviewers: alexhardatwork

Merge Risk: Minimal · up to 899bf

This PR removes automated Renovate approvals without introducing an established workflow defect.

Pre-merge checks: Passed 4

Check name Status Explanation
Title check Passed The title "ci: stop auto-approving Renovate PRs" matches the main change. The PR deletes the renovate-auto-approve-self.yml workflow, which stops automatic approval of Renovate pull requests. The titl…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Description check Passed The description clearly explains what changed and why, includes reviewer notes, and completes the checklist. The Testing section is missing, but the checklist confirms that no tests are required, so t…
Full details: Title check

Explanation

The title "ci: stop auto-approving Renovate PRs" matches the main change. The PR deletes the renovate-auto-approve-self.yml workflow, which stops automatic approval of Renovate pull requests. The title is short, specific, and uses a conventional commit prefix.

Full details: Description check

Explanation

The description clearly explains what changed and why, includes reviewer notes, and completes the checklist. The Testing section is missing, but the checklist confirms that no tests are required, so the description is mostly complete.

Finishing Touches

Generate unit tests (beta)

  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Recent review info

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 46355a6d-5f22-4706-a8cf-78ce829c2223
Commits

Reviewing files that changed from the base of the PR and between 983ddfc and 899bfbc.

Files selected for processing: 2

  • .github/workflows/flake-closure-diff-self.yml
  • .github/workflows/renovate-auto-approve-self.yml
Files with no reviewable changes: 1

  • .github/workflows/renovate-auto-approve-self.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

@yocaba
yocaba enabled auto-merge November 6, 2026 12:38
@yocaba
yocaba merged commit 859a691 into main Nov 6, 2026
16 checks passed
@yocaba
yocaba deleted the chore/disable-renovate-auto-approve branch November 6, 2026 13:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants