From d9ee7ff5ae4d63bfb2ee11892d20d01aeb254b7d Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Mon, 20 Jul 2026 16:13:39 -0400 Subject: [PATCH] ci: exempt dependabot from pr-issue-linkage gate (#684) Caller opt-in for the exempt-authors input on the shared pr-issue-linkage reusable. dependabot PR bodies cannot carry the closing-keyword + `## Related` markers the gate requires, so every dependency-update PR fails the required check and is unmergeable. Passing exempt-authors: 'dependabot[bot]' skips body validation for that login only. Pin bumped to melodic-software/ci-workflows@d7734df8c557084edc2df7cf578cf62ad2f261e4, the merge SHA of ci-workflows#171 (exempt-authors input live), so the exemption is not a no-op. Supersedes #748, which is blocked by required_signatures: commit 23608103 on that branch was written via an unsigned API contents-PUT and cannot be made to pass signature verification after the fact. This branch recreates the identical, already-reviewed file change from a clean, fully-signed commit off main instead. Closes #684 --- .github/workflows/pr-issue-linkage.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pr-issue-linkage.yml b/.github/workflows/pr-issue-linkage.yml index cd76300e9..dbffc4c90 100644 --- a/.github/workflows/pr-issue-linkage.yml +++ b/.github/workflows/pr-issue-linkage.yml @@ -29,6 +29,9 @@ concurrency: jobs: pr-issue-linkage: permissions: {} - uses: melodic-software/ci-workflows/.github/workflows/pr-issue-linkage.yml@90f1c54935203fa31b5b3d1f41531228be2c2b7f # 90f1c54 2026-07-18 + uses: melodic-software/ci-workflows/.github/workflows/pr-issue-linkage.yml@d7734df8c557084edc2df7cf578cf62ad2f261e4 # d7734df 2026-07-20 with: runner: ubuntu-24.04 + # dependabot PR bodies cannot carry the closing-keyword + `## Related` + # markers this gate requires; exempt the login so its PRs are mergeable. + exempt-authors: 'dependabot[bot]'