Skip to content

remove dependabot#489

Draft
joamatab wants to merge 4 commits intomainfrom
remove_dependabot
Draft

remove dependabot#489
joamatab wants to merge 4 commits intomainfrom
remove_dependabot

Conversation

@joamatab
Copy link
Contributor

@joamatab joamatab commented Feb 4, 2026

  • add gdsfactoryplus
  • add_version
  • add_code_owners
  • update_gdsfactory9.34
  • update_gdsfactory_9.34
  • remove_required_label
  • remove_dependabot

Summary by Sourcery

Update dependencies and GitHub workflows by introducing an AI-based PR review, simplifying release drafting triggers, and removing legacy automation.

New Features:

  • Add a Claude-based pull request review workflow triggered on PR events or comments mentioning @claude.

Enhancements:

  • Update gdsfactory dependency to version 9.34.0.
  • Simplify the release-drafter workflow to run only on pushes to the main branch.

CI:

  • Add a GitHub Actions workflow for automated Claude PR reviews.
  • Remove the required-labels workflow and its associated job from the release-drafter configuration.
  • Remove Dependabot configuration from the repository.

@sourcery-ai
Copy link
Contributor

sourcery-ai bot commented Feb 4, 2026

Reviewer's Guide

Updates CI configuration by simplifying the release workflow, removing Dependabot and required-label automation, bumping the gdsfactory dependency, and adding a Claude-based PR review workflow.

Sequence diagram for Claude PR review workflow

sequenceDiagram
  actor Dev
  participant GitHub
  participant Workflow_claude_pr_review
  participant Job_claude_review
  participant Anthropic_API

  Dev->>GitHub: Open or update pull_request
  GitHub-->>Workflow_claude_pr_review: Trigger pull_request event
  Workflow_claude_pr_review->>Job_claude_review: Start job claude-review
  Job_claude_review->>GitHub: actions_checkout fetch-depth 0
  Job_claude_review->>Anthropic_API: anthropic_api_key, model claude-sonnet-4-20250514
  Anthropic_API-->>Job_claude_review: PR review feedback
  Job_claude_review->>GitHub: Post review comments on PR

  Dev->>GitHub: Add issue_comment containing @claude
  GitHub-->>Workflow_claude_pr_review: Trigger issue_comment event
  Workflow_claude_pr_review->>Job_claude_review: Start job claude-review if comment mentions @claude
  Job_claude_review->>Anthropic_API: Send context and instructions
  Anthropic_API-->>Job_claude_review: Reply with analysis
  Job_claude_review->>GitHub: Post reply comment on PR thread
Loading

File-Level Changes

Change Details Files
Simplify release-drafter workflow and remove required label enforcement from that workflow.
  • Rename the workflow from 'Release Drafter and Labels' to 'Release Drafter'.
  • Stop triggering the release-drafter workflow on pull_request events, keeping only pushes to main.
  • Remove the 'require_label' job that enforced at least one of a set of labels on PRs.
.github/workflows/release-drafter.yml
Upgrade the gdsfactory dependency to a newer minor version.
  • Update the gdsfactory dependency constraint from ~=9.31.0 to ~=9.34.0 in the project dependencies.
pyproject.toml
Introduce an automated Claude-based PR review workflow.
  • Add a new GitHub Actions workflow that runs on PR events and on issue comments mentioning @claude.
  • Configure the workflow to use anthropics/claude-code-action@beta with the claude-sonnet-4-20250514 model and a set of allowed tools.
  • Provide custom review instructions tailored for a GDSFactory PDK repository, including focus areas and references to AGENTS.md.
.github/workflows/claude-pr-review.yml
Remove Dependabot and standalone required-label workflow configuration.
  • Delete the Dependabot configuration file to stop automated dependency update PRs.
  • Remove the separate require-labels workflow that enforced label requirements independently of the release-drafter workflow.
.github/dependabot.yml
.github/workflows/require-labels.yml

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Copy link
Contributor

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've left some high level feedback:

  • In the claude-pr-review.yml workflow, consider tightening the permissions block (e.g. dropping id-token: write and possibly issues: write if you only need to comment on PRs) to follow the principle of least privilege.
  • The anthropics/claude-code-action@beta reference in claude-pr-review.yml is a moving target; pinning to a specific tagged version or commit SHA would make the workflow more stable and predictable over time.
Prompt for AI Agents
Please address the comments from this code review:

## Overall Comments
- In the `claude-pr-review.yml` workflow, consider tightening the `permissions` block (e.g. dropping `id-token: write` and possibly `issues: write` if you only need to comment on PRs) to follow the principle of least privilege.
- The `anthropics/claude-code-action@beta` reference in `claude-pr-review.yml` is a moving target; pinning to a specific tagged version or commit SHA would make the workflow more stable and predictable over time.

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

Copy link
Contributor

@ThomasPluck ThomasPluck left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No problem with merge - let's try to get tests passing before merge :)

@ThomasPluck ThomasPluck marked this pull request as draft February 6, 2026 10:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants