Skip to content

Group minor and patch Dependabot updates per ecosystem - #655

Open
SeriouslyAwesome wants to merge 3 commits into
mainfrom
jellis/dependabot-grouping
Open

SeriouslyAwesome wants to merge 3 commits into
mainfrom
jellis/dependabot-grouping

Conversation

@SeriouslyAwesome

@SeriouslyAwesome SeriouslyAwesome commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

What are you trying to accomplish?

Dependabot opens a separate pull request for every outdated dependency, which makes for a lot of small PRs.

What approach did you choose and why?

Group minor and patch updates into one pull request per ecosystem (bundler, npm, GitHub Actions). Major updates stay individual and security updates are unchanged. Open Dependabot pull requests are limited to 5 per ecosystem.

Checklist

  • I have added a CHANGELOG entry for this change (or determined that it isn't needed)

@SeriouslyAwesome
SeriouslyAwesome marked this pull request as ready for review October 26, 2026 14:11
@SeriouslyAwesome
SeriouslyAwesome requested a review from a team as a code owner October 26, 2026 14:11
@SeriouslyAwesome
SeriouslyAwesome force-pushed the jellis/dependabot-grouping branch from 82957b5 to 94e708f Compare October 27, 2026 15:36

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant