Repository navigation
ci: Dependabot npm branch names without a .github path component - #41
Merged
Merged
Conversation
Signed-off-by: Nicolai Ehrhardt <245527909+predictor2718@users.noreply.github.com>
This was referenced Oct 31, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Follow-up to #40.
What changed
The npm entry for
.github/site-checksnow setspull-request-branch-name.separator: "-".Why
Right after the merge, Dependabot's first npm run failed while creating the update for html-validate. The run logged:
With the default separator
/, the branch name contains.githubas a path component of its own,dependabot/npm_and_yarn/.github/site-checks/…. Git ref names may not have a component that starts with a dot, so GitHub rejects the ref. With-the directory is no longer a component of its own: the branch becomesdependabot-npm_and_yarn-.github-site-checks-….The other ecosystems keep their branch names.
How to test
After the merge, check that the next "Dependabot Updates" run for npm opens a PR instead of failing.