Skip to content

Conversation

malinajirka
Copy link
Contributor

This PR adds a github action that should drop a comment/warning on PRs created by dependabot that update the constraintlayout-compose dependency. We found out that the new version breaks the POS, specifically the items in the cart start disappearing during screen transitions.

The code was vibe coded and hasn't been tested. I've checked it and it looks fine.

I noticed it uses github-script@v7 while we use v4 in the other scripts - not sure if that's fine or not, but according to Claude v7 should be more secure.

Let me know what you think, thanks!

@malinajirka malinajirka requested a review from ParaskP7 August 15, 2025 08:13
@malinajirka malinajirka added this to the 23.1 milestone Aug 15, 2025
@malinajirka malinajirka added the category: tooling Anything that involves building & maintaining the project, including scripts, `Fastfile`, etc. label Aug 15, 2025
@wpmobilebot
Copy link
Collaborator

📲 You can test the changes from this Pull Request in WooCommerce-Wear Android by scanning the QR code below to install the corresponding build.
App Name WooCommerce-Wear Android
Platform⌚️ Wear OS
FlavorJalapeno
Build TypeDebug
Commit2a23466
Direct Downloadwoocommerce-wear-prototype-build-pr14473-2a23466.apk

@wpmobilebot
Copy link
Collaborator

📲 You can test the changes from this Pull Request in WooCommerce Android by scanning the QR code below to install the corresponding build.

App Name WooCommerce Android
Platform📱 Mobile
FlavorJalapeno
Build TypeDebug
Commit2a23466
Direct Downloadwoocommerce-prototype-build-pr14473-2a23466.apk

Copy link
Contributor

@ParaskP7 ParaskP7 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👋 @malinajirka , thanks for this, I just reviewed, vibe-reviewed it too, and it all LGTM, it should work as expected, let's merge this and see, worse-case we quickly revert it! 🙇 ❤️ 🚀

FYI: After merging this, we could (potentially) re-open this #14400 PR and see it working, right... 🤞

I noticed it uses github-script@v7 while we use v4 in the other scripts - not sure if that's fine or not, but according to Claude v7 should be more secure.

👍

@ParaskP7 ParaskP7 requested a review from Copilot August 18, 2025 12:40
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces a GitHub Actions workflow to automatically warn about potential POS (Point of Sale) system issues when Dependabot creates pull requests that update the androidx.constraintlayout:constraintlayout-compose dependency. The workflow is triggered by Dependabot PRs and posts a comment with testing requirements when the specific dependency is being updated.

  • Adds automated detection of constraintlayout-compose dependency updates in Dependabot PRs
  • Creates warning comments with specific POS testing checklist
  • Implements duplicate comment prevention logic

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

);

if (!botComment) {
const commentBody = `## ⚠️ POS Testing Required
Copy link
Preview

Copilot AI Aug 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The multi-line template literal has inconsistent indentation. The content should be aligned with the opening backtick or use consistent indentation throughout the string.

Copilot uses AI. Check for mistakes.

@malinajirka
Copy link
Contributor Author

FYI: After merging this, we could (potentially) re-open this #14400 PR and see it working, right... 🤞

Great idea!

@malinajirka malinajirka merged commit 4138901 into trunk Aug 19, 2025
20 checks passed
@malinajirka malinajirka deleted the issue/woomob-1047-dependabot-github-action-with-warning-about-constraint branch August 19, 2025 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category: tooling Anything that involves building & maintaining the project, including scripts, `Fastfile`, etc.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants