[j0sh]

Dependabot descriptions contain generated HTML that gets copied into squash commit messages. Clean them automatically when a PR is opened, reopened, updated, or edited, preserving Markdown summaries and version tables.

The workflow only edits PR metadata and aborts if the result is empty or still contains HTML. It uses a pinned action with pull-requests: write and does not check out PR code.

Validation:

• Executed the embedded script against the original descriptions from build(deps): bump ubuntu from f144425 to c098726 in /docker in the docker group #6, build(deps): bump the minor-and-patch group with 3 updates #7, and build(deps): bump the actions group with 6 updates #9; verified summaries and tables are retained and repeated runs make no changes.
• Checked clean/closed PRs and empty or unexpected HTML descriptions.
• actionlint v1.7.12 and git diff --check pass. The linter's outdated ubuntu-26.04 label warning was excluded; this is the repository's existing runner and is supported by GitHub.

[Copilot]

🟢 Approval recommended

The workflow is narrowly scoped, validates output before updating descriptions, and has no identified blocking issues.

No open issues 🎉

What changed in this PR

Adds a workflow to remove generated HTML from Dependabot PR descriptions before it carries into squash commit messages, while preserving Markdown summaries and version tables.

Changes:

• Runs when Dependabot PRs are opened, reopened, synchronized, or edited.
• Removes generated details and boilerplate, rejecting empty output or remaining HTML.
• Uses a pinned action with PR-write permissions and no checkout or execution of PR code.

File	Description
.github/​workflows/​clean-dependabot.yml	Adds guarded, metadata-only cleanup of Dependabot PR descriptions.

_{Review effort: Balanced}