fix(dependabot-rebase): update SHA pin to include GITHUB_TOKEN fix (PR #141)#142
fix(dependabot-rebase): update SHA pin to include GITHUB_TOKEN fix (PR #141)#142
Conversation
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 2 minutes and 44 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Pro Run ID: 📒 Files selected for processing (2)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
Updates the pinned commit SHA for the dependabot-rebase reusable workflow caller stubs so they invoke the version that includes the GITHUB_TOKEN fix for update-branch.
Changes:
- Bump the reusable workflow
uses:pin from35e0e20...tof5c167c...in the repo workflow stub. - Bump the same
uses:pin in the standards template to keep templates and stubs in sync.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
.github/workflows/dependabot-rebase.yml |
Updates the reusable workflow pin to the post-PR-141 commit SHA. |
standards/workflows/dependabot-rebase.yml |
Mirrors the same SHA bump in the standards template to prevent drift. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
The previous header said 'MUST NOT change the uses: line', but bumping the pinned SHA when upgrading the reusable workflow version is intentional and necessary. Clarify what is forbidden vs what is allowed.
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Problem
After merging PR #141, the caller stubs still reference SHA `35e0e20` (the version from PR #140). This means the reusable workflow being invoked predates the GITHUB_TOKEN fix — `update-branch` is still using the app token, which lacks `workflows` permission.
Fix
Update both caller stubs to reference `f5c167c` (HEAD of main after PR #141 merged), which includes:
Impact
Once merged, the next push to main will trigger a workflow run that can successfully call `update-branch` on PRs #125 and #129, which have been stuck behind for several days.
🤖 Generated with Claude Code