[PR #12] [MERGED] fix(config): set internalChecksFilter to none #4

Closed
opened 2026-06-08 09:05:01 +00:00 by ryangr0 · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/webgrip/renovate-config/pull/12
Author: @Ryangr0
Created: 6/3/2026
Status: Merged
Merged: 6/3/2026
Merged by: @Ryangr0

Base: mainHead: fix/internal-checks-filter


📝 Commits (1)

  • 255d0f3 fix(config): set internalChecksFilter to none

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 default.json (+1 -1)

📄 Description

Problem

The 6 items stuck in Pending Status Checks on the dashboard will never move.

Why: internalChecksFilter: "strict" tells Renovate: "after stripping my own internal checks like stability-days, if there are zero external CI checks remaining, treat the branch as still-pending."

Those 6 branches (attest-build-provenance, create-github-app-token, docker-login, codeql, cosign-installer) all only modify .github/actions/cosign-sign-attest/action.yml. The on_source_change.yml workflow only fires on these paths:

  • ops/docker/**
  • .releaserc.js
  • .github/actions/semantic-release-monorepo/action.yml
  • .github/workflows/on_source_change.yml
  • .github/workflows/on_release_published.yml

.github/actions/cosign-sign-attest/action.yml is not in that list → no GitHub Actions runs ever → only renovate/stability-days status exists → strict mode treats it as pending forever.

Fix

internalChecksFilter: "none" — Renovate trusts the platform's combined commit status as-is. stability-days still enforces minimumReleaseAge soak; we just stop requiring an external check on top of it.

The prCreation: "not-pending" + prNotPendingHours: 2 combination still applies: if combined status is pending, wait up to 2h then create anyway.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/webgrip/renovate-config/pull/12 **Author:** [@Ryangr0](https://github.com/Ryangr0) **Created:** 6/3/2026 **Status:** ✅ Merged **Merged:** 6/3/2026 **Merged by:** [@Ryangr0](https://github.com/Ryangr0) **Base:** `main` ← **Head:** `fix/internal-checks-filter` --- ### 📝 Commits (1) - [`255d0f3`](https://github.com/webgrip/renovate-config/commit/255d0f34f2d9da8d6f33ab946d75d31c54c95c8a) fix(config): set internalChecksFilter to none ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `default.json` (+1 -1) </details> ### 📄 Description ## Problem The 6 items stuck in **Pending Status Checks** on the dashboard will never move. **Why:** `internalChecksFilter: "strict"` tells Renovate: *"after stripping my own internal checks like `stability-days`, if there are zero external CI checks remaining, treat the branch as still-pending."* Those 6 branches (attest-build-provenance, create-github-app-token, docker-login, codeql, cosign-installer) all only modify `.github/actions/cosign-sign-attest/action.yml`. The `on_source_change.yml` workflow only fires on these paths: - `ops/docker/**` - `.releaserc.js` - `.github/actions/semantic-release-monorepo/action.yml` - `.github/workflows/on_source_change.yml` - `.github/workflows/on_release_published.yml` `.github/actions/cosign-sign-attest/action.yml` is **not in that list** → no GitHub Actions runs ever → only `renovate/stability-days` status exists → `strict` mode treats it as pending forever. ## Fix `internalChecksFilter: "none"` — Renovate trusts the platform's combined commit status as-is. `stability-days` still enforces `minimumReleaseAge` soak; we just stop requiring an external check on top of it. The `prCreation: "not-pending"` + `prNotPendingHours: 2` combination still applies: if combined status is `pending`, wait up to 2h then create anyway. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
ryangr0 2026-06-08 09:05:01 +00:00
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/renovate-config#4
No description provided.