Skip to content

feat: implement cursor pagination for dependabot alerts#2651

Open
MayorFaj wants to merge 5 commits into
github:mainfrom
MayorFaj:fix-dependabot-alerts-cursor-pagination
Open

feat: implement cursor pagination for dependabot alerts#2651
MayorFaj wants to merge 5 commits into
github:mainfrom
MayorFaj:fix-dependabot-alerts-cursor-pagination

Conversation

@MayorFaj

@MayorFaj MayorFaj commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

Why

Fixes #2649 #2648

What changed

Fixes list_dependabot_alerts pagination by switching it from page-based pagination to cursor-based pagination.

  • Removed the unsupported page parameter from list_dependabot_alerts.
  • Added cursor pagination support using after and perPage.
  • Updated the tool response to include pageInfo, so callers can use pageInfo.nextCursor for the next page.
  • Updated tests, toolsnap, and generated docs.

MCP impact

  • No tool or API changes
  • Tool schema or behavior changed
  • New tool added

Prompts tested (tool changes only)

Security / limits

  • No security or limits impact
  • Auth / permissions considered
  • Data exposure, filtering, or token/size limits considered

Tool renaming

  • I am renaming tools as part of this PR (e.g. a part of a consolidation effort)
    • I have added the new tool aliases in deprecated_tool_aliases.go
  • I am not renaming tools as part of this PR

Note: if you're renaming tools, you must add the tool aliases. For more information on how to do so, please refer to the official docs.

Lint & tests

  • Linted locally with ./script/lint
  • Tested locally with ./script/test

Docs

  • Updated (README / docs / examples)

@MayorFaj MayorFaj requested a review from a team as a code owner June 9, 2026 03:27
Copilot AI review requested due to automatic review settings June 9, 2026 03:27
Copilot AI reviewed Jun 9, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

This PR updates the list_dependabot_alerts tool to use cursor-based pagination and to surface pagination metadata (next cursor) in the tool response.

Changes:

  • Switched list_dependabot_alerts from page-based pagination (page) to cursor pagination (after).
  • Updated the tool response format to wrap alerts with pageInfo (including nextCursor / hasNextPage).
  • Updated tests, tool snapshots, and README to reflect the new pagination input and output shape.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File Description
pkg/github/dependabot.go Implements cursor pagination for Dependabot alerts and returns alerts plus pageInfo envelope.
pkg/github/dependabot_test.go Updates tests to use after and validates pageInfo.nextCursor/hasNextPage behavior.
pkg/github/toolsnaps/list_dependabot_alerts.snap Updates the tool input schema snapshot to remove page and add after.
README.md Updates documented inputs for list_dependabot_alerts to replace page with after.

Comment thread pkg/github/dependabot.go
Comment thread pkg/github/dependabot.go Outdated
@RossTarrant

RossTarrant commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

Hey @MayorFaj thanks for your contribution - your fix looks great.

Hope you don't mind, but I've pushed a small follow-up commit to your branch to tidy up a couple of things. I made the shared cursor pagination description generic so it works for both REST and GraphQL cursor-based tools, and moved the shared pageInfo helper out of the projects-specific code.

@MayorFaj

MayorFaj commented Jun 10, 2026

Copy link
Copy Markdown
Contributor Author

Hey @MayorFaj thanks for your contribution - your fix looks great.

Hope you don't mind, but I've pushed a small follow-up commit to your branch to tidy up a couple of things. I made the shared cursor pagination description generic so it works for both REST and GraphQL cursor-based tools, and moved the shared pageInfo helper out of the projects-specific code.

Thanks @RossTarrant

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@RossTarrant RossTarrant RossTarrant approved these changes

@tommaso-moro tommaso-moro tommaso-moro approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

list_dependabot_alerts fails with HTTP 400 since pagination was added (page-based params on a cursor-only API)

4 participants

@MayorFaj @RossTarrant @tommaso-moro