amaechler opened a new pull request, #20691: URL: https://github.com/apache/druid/pull/20691
### Description Maven and npm Dependabot PRs are currently titled `ci: bump ...` (for example #20639 and #20654), although they change build dependencies. Earlier ones were `build(deps): bump ...` and `build(deps-dev): bump ...`. This PR adds `commit-message` with `prefix: "build"` and `include: "scope"` to the Maven entry and to both npm entries (`/website/` and `/web-console/`). Titles become: - `build(deps): bump org.ow2.asm:asm-commons from 9.10.1 to 9.11` - `build(deps-dev): bump com.google.guava:guava from 33.7.1-jre to 33.7.2-jre` for test-scoped dependencies - `build(deps): bump shell-quote from 1.10.0 to 1.12.0 in /web-console` <details> <summary>Why the prefix changed</summary> The Maven and npm entries in `.github/dependabot.yml` have no `commit-message` setting. Without one, Dependabot copies the prefix style of its most recent commit on `master`, whatever the ecosystem ([`pr_name_prefixer.rb`](https://github.com/dependabot/dependabot-core/blob/main/common/lib/dependabot/pull_request_creator/pr_name_prefixer.rb)). Once #20577 merged as `ci: bump the github-actions group with 4 updates`, using the explicit `ci` prefix of the GitHub Actions entry, Maven and npm PRs started copying it. Titles currently switch between `ci:` and `build(deps):` depending on which Dependabot PR merged last. </details> <hr> This PR has: - [x] been self-reviewed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
