Skip to content

Group dependabot updates by ecosystem - #21

Merged
zsmithnyc merged 1 commit into
mainfrom
group-dependabot-updates
Oct 22, 2026
Merged

zsmithnyc merged 1 commit into
mainfrom
group-dependabot-updates

Conversation

@zsmithnyc

Copy link
Copy Markdown
Collaborator

Summary

  • Merging the deploy pipeline introduced several new GitHub Actions dependencies at once, and dependabot opened one PR per dependency -- five in a single run, with the same pattern recurring weekly.
  • Adds `groups:` so minor/patch pip and docker bumps, and all github-actions bumps (low risk, not meaningfully semver-versioned the same way), land in one PR per ecosystem per run instead of one per dependency.
  • Majors are intentionally left out of the groups so they still open individually for a closer look.

Test plan

  • Next scheduled dependabot run opens at most one PR per ecosystem for non-major bumps

🤖 Generated with Claude Code

Merging the deploy pipeline introduced several new GitHub Actions
dependencies at once, and dependabot opened one PR per dependency --
five at once, with more to follow weekly. Grouping minor/patch bumps
(and all github-actions bumps, which don't carry the same semver risk)
batches them into a single PR per ecosystem per run. Majors are left
ungrouped so they still get individual review.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@zsmithnyc
zsmithnyc merged commit 4ba35c6 into main Oct 22, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant