Dependabot not adding Team as reviewer

Question

I have implemented dependabot in my org repo. Dependabot is creating pull requests all fine. But it's not adding any team reviewers, there are no error logs on PR or in Dependency graph> dependabot.

My yml config:-

version: 2
updates:

  # Maintain dependencies for login
  - package-ecosystem: "npm"
    directory: "/login"
    schedule:
      interval: "monthly"
    reviewers:
      - "org/cloud-reviewers"
    pull-request-branch-name:
      separator: "-"
    target-branch: "dev"
    open-pull-requests-limit: 5

What was the root cause, from the ones I mention below in the answer you just accepted? — VonC, Sep 07 '22 at 08:57
The issue was not having the correct permissions to that Team I was using for PR review. — Nandan Raj, Sep 07 '22 at 09:01
Thank you for your feedback. I have included your comment in the answer for more visibility. — VonC, Sep 07 '22 at 09:53

VonC · Accepted Answer · 2022-09-07T09:52:41.573

You are right that since July 2020, you can "assign a GitHub team to review Dependabot pull requests".

But the Configure dependabot.yml / reviewers section includes:

You must use the full team name, including the organization, as if you were @mentioning the team.

So double-check if org/cloud-reviewers is the right id (try and @ mention that account in a comment for instance)
And check if the permission level include submitting a PR review.

The OP Nandan Raj confirms in the comments an issue with not having the correct permissions to the Team used for PR review.

Dependabot not adding Team as reviewer

1 Answers1