Bugbot not respecting allowlist or blocklist settings

[smillet-cr]

Describe the Bug

On our GitHub organizations we have bot users that I do not want triggering bugbot. I have attempted to add those users to the blocklist but the automatic review was still being triggered. I have since moved to an allowlist with only the human members of the org on the list but the bot user’s PRs are still being automatically triggered. It seems that those settings are being ignored.

Steps to Reproduce

Add a bot user (in this case renovate) to the blocklist. Observe that PRs opened by that bot user still automatically trigger bugbot.

Alternatively set a strict allowlist exclusing the bot user. Observe that PRs opened by that bot user still automatically trigger bugbot.

Expected Behavior

In either scenario no renovate PR should trigger bugbot automatically.

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

N/A since it is a server side issue.

Additional Information

This is a showstopper for using bugbot past the preview period since I need to be able to block automation to manage costs.

Does this stop you from using Cursor

No - Cursor works, but with this issue

[jkaplan]

Are you sure you put the bot’s username in the denylist exactly correctly? Not sure if we have a bug but would want to double check this before we investigate!

[smillet-cr]

There may have been a typo in the username I put into the blocklist. Confirmed it is now correct, by searching for open PRs based on the username as Github sees it in terms of PRs opened by the bot user. I also just looked at the new report on recent reviews in the UI and added an additional username that shows up for the bot there. I will continue to monitor.

For PRs where bugbot was triggered would subsequent pushes to that PR re-trigger bugbot even after the user was added to the blocklist if that user was not on the blocklist at the time of the first bugbot review? And if that is the case maybe that would also explain why I still saw bugbot triggered on bot PRs even when I moved to an explicit allowlist?