The dependabot-auto workflow comments "Major version bump, so this one waits for a maintainer" more than once on the same pull request.
The step has no event filter. pull_request_target defaults to opened, synchronize and reopened, and Dependabot pushes a rebase moments after opening a pull request, so the step runs again and comments again.
Of the five major bumps opened on Sep 1, #145, #146 and #147 each carry the comment twice. A pull request left open collects another on every rebase, which is every time main moves under it.
The
dependabot-autoworkflow comments "Major version bump, so this one waits for a maintainer" more than once on the same pull request.The step has no event filter.
pull_request_targetdefaults toopened,synchronizeandreopened, and Dependabot pushes a rebase moments after opening a pull request, so the step runs again and comments again.Of the five major bumps opened on Sep 1, #145, #146 and #147 each carry the comment twice. A pull request left open collects another on every rebase, which is every time main moves under it.