require-dependabot-commit-message-prefix
Rule catalog ID: R079
Targeted pattern scopeโ
Dependabot update entries and multi-ecosystem groups that configure commit-message formatting.
What this rule reportsโ
This rule reports update entries that do not resolve to a non-empty commit-message.prefix.
Why this rule existsโ
Dependabot commit messages also shape pull request titles. Requiring a prefix keeps automation, filtering, and review conventions consistent across dependency update pull requests.
โ Incorrectโ
version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
time: "05:30"
timezone: "UTC"
โ Correctโ
version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
time: "05:30"
timezone: "UTC"
commit-message:
prefix: "deps"
Additional examplesโ
Teams that trigger automation from pull request titles or commit conventions often use this rule to keep Dependabot updates aligned with the rest of the repository.
ESLint flat config exampleโ
import githubActions from "eslint-plugin-github-actions-2";
export default [githubActions.configs.dependabot];
When not to use itโ
Disable this rule when the repository intentionally relies on Dependabot's default commit message heuristics.