Matt Glaman Automates Drupal Release Notes in Dependabot PRs with GitHub Action

A macbook with lines of code in a termial window
Christopher Gower / Unsplash

In a blog post published on 9 December 2025, Matt Glaman unveiled a new GitHub Action that enhances Drupal module update workflows in Dependabot. The tool, mglaman/dependabot-drupal-mrn, automatically fetches and appends release notes from drupal-mrn.dev into pull request descriptions — making it easier for developers to assess the impact of updates directly from the PR itself.

Traditionally, Dependabot works well for packages hosted on GitHub, as it pulls in release metadata. But for modules hosted on git.drupalcode.org, the update lacks context — reviewers have to manually navigate to the module's Drupal.org page and locate release notes. This gap slows down or discourages proper code review.

Glaman’s action solves this by detecting updated Drupal packages in a PR, querying the drupal-mrn API for the corresponding release data, and injecting those notes into the PR body using the GitHub API. This eliminates the need to manually track changelogs and aligns the review process more closely with modern DevOps practices.

The implementation is straightforward: developers can add a workflow YAML file that triggers only for PRs created by Dependabot. The action parses the diff, queries release note data, and updates the PR in real-time. It’s particularly valuable for modules like Webform, where version changes can imply major functional shifts.

To start using it, developers can visit the GitHub Marketplace page or follow the setup instructions in the original blog.

Disclosure: This content is produced with the assistance of AI.

Disclaimer: The opinions expressed in this story do not necessarily represent that of TheDropTimes. We regularly share third-party blog posts that feature Drupal in good faith. TDT recommends Reader's discretion while consuming such content, as the veracity/authenticity of the story depends on the blogger and their motives. 

Note: The vision of this web portal is to help promote news and stories around the Drupal community and promote and celebrate the people and organizations in the community. We strive to create and distribute our content based on these content policy. If you see any omission/variation on this please reach out to us at #thedroptimes channel on Drupal Slack and we will try to address the issue as best we can.

Upcoming Events