Skip to content

fix(ci): strip @mentions from dependabot major version analysis comments#4872

Merged
jpr5 merged 1 commit into
mainfrom
fix/dependabot-spam
May 15, 2026
Merged

fix(ci): strip @mentions from dependabot major version analysis comments#4872
jpr5 merged 1 commit into
mainfrom
fix/dependabot-spam

Conversation

@jpr5

@jpr5 jpr5 commented May 15, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Strip @username mentions from upstream release notes before posting as PR comments
  • Prevents notification spam to external open-source contributors
  • Preserves @scope/pkg, email@domain, and action@version patterns

Closes CopilotKit/aimock#216

Test plan

  • Regex tested against real spam comment from aimock PR Add non forwarded body + header parameters #214 (44 mentions stripped, 0 collateral damage)
  • YAML code refs (checkout@v5) preserved
  • npm scopes (@actions/cache) preserved
  • Email patterns preserved

Upstream release notes contain @username references that trigger GitHub
notifications when posted as PR comments. Strip mention-prefix @ from
standalone mentions while preserving @scope/pkg, email@domain, and
action@version patterns.

Closes CopilotKit/aimock#216
@vercel

vercel Bot commented May 15, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
chat-with-your-data Ready Ready Preview, Comment May 15, 2026 8:37pm
docs Building Building Preview, Comment May 15, 2026 8:37pm
form-filling Building Building Preview, Comment May 15, 2026 8:37pm
research-canvas Building Building Preview, Comment May 15, 2026 8:37pm
travel Building Building Preview, Comment May 15, 2026 8:37pm

Request Review

@github-actions

Copy link
Copy Markdown
Contributor

📣 Social Copy Generator

Generate social media copies (Twitter/X, LinkedIn, Blog Post) for this PR using Claude.

  • Generate social media copies

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Automated spamming of open source contributor users

1 participant