Skip to content

build(deps): group Dependabot updates and slow the cadence - #32

Merged
wstein merged 1 commit into
mainfrom
chore/dependabot-grouping
Nov 6, 2026
Merged

wstein merged 1 commit into
mainfrom
chore/dependabot-grouping

Conversation

@wstein

@wstein wstein commented Nov 6, 2026

Copy link
Copy Markdown
Owner

Quieter Dependabot updates for this repository: fewer, grouped pull requests, fewer lockfile conflicts.

  • Cadence weekly (Monday) instead of the previous setting, 7-day cooldown, at most 3 open pull requests per ecosystem.
  • Minor and patch updates are grouped per ecosystem (development and production separately where the ecosystem has the distinction, GitHub Actions in one group); major updates stay individual pull requests.
  • All existing ignore rules, labels, directories and comments are kept.

Not included on purpose: the auto-merge workflow. It is prepared locally and follows once required status checks exist on the default branch (without them gh pr merge --auto merges immediately).

Checked: the file parses with a strict YAML parser. Not checked: Dependabot itself has not read it yet (GitHub validates it after the push; look at the Dependabot tab of the dependency graph).

Changed files: .github/dependabot.yml

🤖 Generated with Claude Code

Check weekly on Monday with a 7-day cooldown and at most 3 open PRs.
Group minor and patch updates; major updates stay separate.
Existing ignore rules are kept.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@wstein
wstein marked this pull request as ready for review November 6, 2026 06:51
@wstein
wstein merged commit 5dc13da into main Nov 6, 2026
20 checks passed
@wstein
wstein deleted the chore/dependabot-grouping branch November 6, 2026 06:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant