You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Reimplement Danger on pull_request_target (migrate to danger-pr-comment) #2630
Danger uses a hardcoded token, which gets revoked by GitHub.
We need to split Danger work into a part that runs on pull_request to analyze the PR, and the part that comments on the pull request that uses a secret token.
I’ve added some changes to danger-changelog#65, which means we won’t need to reimplement the changelog plugin in our Dangerfile as I did in my draft PR.
Once that is merged, we can move forward with merging this PR: ruby-grape/danger#14, …and then bump the ruby-grape-danger version.
@numbata does it make sense to still have ruby-grape-danger?
I got rid of the similar one in slack-ruby-client and did the migration with claude's help
migrate Danger to use danger-pr-comment workflow similar to https://github.com/slack-ruby/slack-ruby-client/pull/581 and https://github.com/slack-ruby/slack-ruby-bot-server/pull/181
make sure to include danger, danger-pr-comment, danger-changelog and danger-toc in Gemfile
make sure to changelog.check! and toc.check! in Dangerfile
get rid of Danger.gemfile if it's present
commit, push, open a pr
update changelog, amend
changed the title [-]Reimplement Danger on pull_request_target[/-][+]Reimplement Danger on pull_request_target (migrate to danger-pr-comment)[/+]on Dec 30, 2025
@dblock It depends. If we want a shared "common" Dangerfile across all grape-* gems, then yeah, it makes sense so we can enforce TOC + changelog validation consistently.
But for grape-oas I set changelog.format = :keep_a_changelog, so there’s no need for the ruby-grape-danger dependency there.
Activity
numbata commentedon Dec 7, 2025
Something like this https://github.com/ruby-grape/grape/pull/2632/files ?
dblock commentedon Dec 7, 2025
Yes, if you can make it work @numbata !
numbata commentedon Dec 8, 2025
I’ve added some changes to danger-changelog#65, which means we won’t need to reimplement the changelog plugin in our
Dangerfileas I did in my draft PR.Once that is merged, we can move forward with merging this PR: ruby-grape/danger#14, …and then bump the
ruby-grape-dangerversion.numbata commentedon Dec 9, 2025
For transparency, my plan is:
github_tokenfrom danger-changelogAdd support for running changelog checks without GitHub API token dblock/danger-changelog#65
toc!check (which also requiresgithub_token) from the Dangerfileremove TOC check for README danger#14
danger-changelogversion for ruby-grape-dangerRemove API token requirement from Danger workflow #2632
dblock commentedon Dec 9, 2025
Sounds great @numbata, I merged dblock/danger-changelog#65
dblock commentedon Dec 30, 2025
@numbata does it make sense to still have ruby-grape-danger?
I got rid of the similar one in slack-ruby-client and did the migration with claude's help
[-]Reimplement Danger on pull_request_target[/-][+]Reimplement Danger on pull_request_target (migrate to danger-pr-comment)[/+]dblock commentedon Dec 30, 2025
Repositories to Migrate to pull_request_target
numbata commentedon Dec 30, 2025
@dblock It depends. If we want a shared "common" Dangerfile across all
grape-*gems, then yeah, it makes sense so we can enforce TOC + changelog validation consistently.But for grape-oas I set
changelog.format = :keep_a_changelog, so there’s no need for theruby-grape-dangerdependency there.dblock commentedon Dec 30, 2025
I say we kill it. Opened a bunch of PRs.