Skip to content

update CentralRepoOps docs #17285

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mnkiefer merged 2 commits into from
Feb 20, 2026
Merged

update CentralRepoOps docs #17285

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2bad5d8
update CentralRepoOps docs
mnkiefer Feb 20, 2026
2d275f5
Merge branch 'main' into update-central-repo-ops
mnkiefer Feb 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 10 additions & 19 deletions docs/src/content/docs/patterns/centralrepoops.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ Below are the key benefits of this pattern for enterprise use cases:
- **Consistency at scale** - Same rollout logic and policy gates across all repositories
- **Risk reduction** - Controlled fan-out (`max`), phased prioritization, and explicit rationale
- **Auditability** - One orchestrator run provides a full decision trail of selection and outcomes
- **Operational efficiency** - Teams avoid copy-pasting workflows into every repository
- **Operational agility** - Update workflows in one central repository without pushing `main` changes across dozens or hundreds of repositories
- **Security posture** - Prioritize exposed or vulnerable repositories first


Expand Down Expand Up @@ -45,12 +45,6 @@ Navigate to your central repository and create a workflow file `.github/workflow
on:
schedule:
- cron: '0 9 * * 1'

Copilot AI Feb 20, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removing the workflow_dispatch trigger eliminates the ability to manually trigger the workflow or specify custom target repositories. This makes the workflow only schedulable via cron, removing flexibility for ad-hoc executions. If this is intentional to simplify the documentation example, consider adding a note explaining that manual triggers can be added if needed.

Suggested change
- cron: '0 9 * * 1'
- cron: '0 9 * * 1'
# Optional: enable manual runs by adding a workflow_dispatch trigger:
# workflow_dispatch:

Copilot uses AI. Check for mistakes.
workflow_dispatch:
inputs:
target_repos:
description: 'List of repos (owner/repo1, owner/repo2)'
required: false
type: string

tools:
github:
Expand All @@ -60,14 +54,14 @@ tools:
safe-outputs:
dispatch-workflow:
workflows: [dependabot-rollout]
max: 50
max: 5

Copilot AI Feb 20, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reducing the max parameter from 50 to 5 is a significant change that will drastically limit the number of repositories that can be processed in parallel. This 90% reduction in capacity may create operational bottlenecks when rolling out changes across large organizations. Consider whether this reduction aligns with the operational requirements, or if this might be a documentation example value that should be clarified.

Suggested change
max: 5
max: 50

Copilot uses AI. Check for mistakes.
---

# Dependabot Rollout Orchestrator

Categorize and orchestrate Dependabot rollout across repositories.

**Target repos**: ${{ github.event.inputs.target_repos }}
**Target repos**: All repos in the organization

## Task

Expand All @@ -81,7 +75,7 @@ Categorize and orchestrate Dependabot rollout across repositories.

3. **Prioritize** - Order repos by rollout preference: simple → security → complex → conflicting

4. **Dispatch** - Dispatch `dependabot-rollout` worker for every prioritized repo with `target_repo` input
4. **Dispatch** - Dispatch `dependabot-rollout` worker for every prioritized repository

5. **Summarize** - Report total candidates, categorization breakdown, selected repos with rationale
```
Expand All @@ -105,14 +99,12 @@ on:
required: true
type: string

engine:
id: copilot
steps:
- name: Checkout target repository
uses: actions/checkout@v5
with:
token: ${{ secrets.ORG_REPO_CHECKOUT_TOKEN }}
repository: ${{ github.event.inputs.target_repo }}
steps:
- name: Checkout target repository
uses: actions/checkout@v5
with:
token: ${{ secrets.ORG_REPO_CHECKOUT_TOKEN }}
repository: ${{ github.event.inputs.target_repo }}
Comment thread
mnkiefer marked this conversation as resolved.

permissions:
contents: read
Expand All @@ -133,7 +125,6 @@ safe-outputs:
create-issue:
target-repo: ${{ github.event.inputs.target_repo }}
title-prefix: '[dependabot-config] '
title-prefix: '[dependabot-config] '
max: 1
---

Expand Down