Combine Dependabot PRs workflow (tulios/kafkajs)
The Combine Dependabot PRs workflow from tulios/kafkajs, explained and optimized by Latchkey.
CI health: B - good
Point runs-on at Latchkey and get job timeouts, SHA-pinned actions, self-healing for flaky steps, and up to 58% lower cost, applied automatically.
What it does
This is the Combine Dependabot PRs workflow from the tulios/kafkajs repository, a real project running GitHub Actions. It is shown here with attribution under its MIT license.
Below, Latchkey shows a faster, safer version produced by its optimization engine.
The workflow
name: "Combine Dependabot PRs"
on:
workflow_dispatch:
jobs:
combine-prs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: maadhattah/combine-dependabot-prs@main
with:
branchPrefix: "dependabot"
mustBeGreen: true
combineBranchName: "combined-prs"
ignoreLabel: "nocombine"
baseBranch: "master"
openPR: true
allowSkipped: falseThe same workflow, on Latchkey
Removes redundant runs and caps runaway jobs. Added and changed lines are highlighted.
name: "Combine Dependabot PRs" on: workflow_dispatch: jobs: combine-prs: timeout-minutes: 30 runs-on: latchkey-small steps: - uses: actions/checkout@v3 - uses: maadhattah/combine-dependabot-prs@main with: branchPrefix: "dependabot" mustBeGreen: true combineBranchName: "combined-prs" ignoreLabel: "nocombine" baseBranch: "master" openPR: true allowSkipped: false
What changed
- Run on Latchkey managed runners with one line (
runs-on), which apply the fixes below automatically and self-heal transient failures. This example useslatchkey-small; pick the runner size that fits the job. - Add a job timeout so a hung step cannot burn hours of runner time.
1 third-party action is referenced by a movable tag. Pin it to the commit SHA (Latchkey resolves and applies this automatically) so a repointed tag cannot change what runs.
This workflow runs 1 job per trigger. On Latchkey the same minutes cost up to 58% less than GitHub-hosted, with zero queue time.