Extract TitleBuilder for PR title composition

[kbukum1]

What are you trying to accomplish?

Extract a lightweight TitleBuilder class from MessageBuilder so that PR title composition (prefix + capitalization + base title) can be reused by dependabot-api for multi-ecosystem combined PRs.

The current MessageBuilder inlines prefix/capitalize logic in pr_name, which cannot be called from dependabot-api without instantiating the entire builder. The API currently hardcodes combined PR titles, completely bypassing commit-message prefix configuration — causing #14032 and #10057.

Fixes #14032
Fixes #10057
Related: #12178

What changed?

1 new file — common/lib/dependabot/pull_request_creator/message_builder/title_builder.rb:

• TitleBuilder#build — composes prefix + capitalization + base title
• Works with a full PrNamePrefixer (updater path) or lightweight commit_message_options hash (API path, no network calls)
• TitleBuilder.multi_ecosystem_base_title — class method for generating multi-ecosystem group titles

MessageBuilder#pr_name now delegates to TitleBuilder instead of inlining the prefix/capitalize logic. No feature flag — the change is a pure extraction with identical behavior.

Anything you want to highlight for special attention from reviewers?

The change to MessageBuilder is minimal (5 lines changed). TitleBuilder follows the same pattern as existing helpers (IssueLinker, MetadataPresenter, LinkAndMentionSanitizer).

The companion dependabot-api PR (github/dependabot-api#7792) uses TitleBuilder to fix the multi-ecosystem prefix bug.

How will you know you have accomplished your goal?

• New TitleBuilder spec passes (10 examples covering prefix, capitalization, scope, dev dependencies, multi-ecosystem)
• Existing MessageBuilder specs continue to pass (behavior unchanged)
• dependabot-api companion PR can use TitleBuilder to apply commit-message prefix to combined PRs

Checklist

• I have run the complete test suite to ensure all tests and linters pass.
• I have thoroughly tested my code changes to ensure they work as expected, including adding additional tests for new functionality.
• I have written clear and descriptive commit messages.
• I have provided a detailed description of the changes in the pull request, including the problem it addresses, how it fixes the problem, and any relevant details about the implementation.
• I have ensured that the code is well-documented and easy to understand.

[Copilot]

Pull request overview

This PR extracts PR title composition logic out of MessageBuilder into a new TitleBuilder helper so title prefixing/capitalization can be reused (notably by dependabot-api for multi-ecosystem combined PRs) while keeping MessageBuilder#pr_name behavior consistent.

Changes:

• Add TitleBuilder to compose a final PR title from a base title plus either a PrNamePrefixer (updater path) or explicit commit_message_options (API path).
• Update MessageBuilder#pr_name to delegate title composition to TitleBuilder.
• Add specs covering prefix, scope, dev prefix behavior, and multi-ecosystem base title generation.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
common/lib/dependabot/pull_request_creator/message_builder/title_builder.rb	Introduces extracted title composition logic intended for reuse outside MessageBuilder.
common/lib/dependabot/pull_request_creator/message_builder.rb	Delegates pr_name formatting to TitleBuilder and requires the new helper.
common/spec/dependabot/pull_request_creator/message_builder/title_builder_spec.rb	Adds unit tests for the new TitleBuilder behavior.

---

You can also share your feedback on Copilot code review. Take the survey.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

---

You can also share your feedback on Copilot code review. Take the survey.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

---

You can also share your feedback on Copilot code review. Take the survey.

[Copilot]

This spec registers a global production check for npm_and_yarn, which mutates Dependabot::Dependency state for the rest of the test suite (order-dependent) and duplicates the canonical lambda already defined in npm_and_yarn/lib/dependabot/npm_and_yarn.rb. Prefer requiring dependabot/npm_and_yarn to use the real registration, or avoid global registration by stubbing Dependency#production? / using test doubles for dependencies in these examples.

Suggested change

	require "dependabot/pull_request_creator/pr_name_prefixer"
	require "dependabot/pull_request_creator/message_builder/title_builder"
	RSpec.describe Dependabot::PullRequestCreator::MessageBuilder::TitleBuilder do
	before do
	Dependabot::Dependency.register_production_check(
	"npm_and_yarn",
	lambda do |groups|
	return true if groups.empty?
	return true if groups.include?("optionalDependencies")
	groups.include?("dependencies")
	end
	)
	end
	require "dependabot/npm_and_yarn"
	require "dependabot/pull_request_creator/pr_name_prefixer"
	require "dependabot/pull_request_creator/message_builder/title_builder"
	RSpec.describe Dependabot::PullRequestCreator::MessageBuilder::TitleBuilder do

[Copilot]

production_dependencies? treats an empty dependencies array as non-production because [].any? is false (so the method returns false). Given dependencies is optional on this helper, callers may reasonably pass [] to mean “unknown/no deps”; in that case we likely want to default to production (or at least keep behavior consistent with nil, which currently defaults to production). Consider changing this to treat nil/empty as production (e.g., return true unless dependencies&.all? { |d| !d.production? }).

Suggested change

	dependencies&.any?(&:production?) != false
	return true if dependencies.nil? || dependencies.empty?
	dependencies.any?(&:production?)