Skip to content

Conversation

@smockle
Copy link
Collaborator

@smockle smockle commented Oct 28, 2025

This PR configures Dependabot to batch certain types of updates:

  • Dependabot will continue to open a PR per major version bump (since those could require breaking changes, slowing down other updates).
  • Dependabot will continue to open a PR per security update (so these can be merged quickly, not slowed down by other updates).
  • Dependabot will open a single PR per ecosystem (npm, bundler, github-actions) batching all other updates (e.g. minor and patch).

Dependabot opened 7 PRs yesterday. With this PR’s configuration, it would have opened just 3—that’s easier to review, and a >50% savings in Actions minutes!

@smockle smockle requested a review from a team as a code owner October 28, 2025 21:30
@smockle smockle requested review from accessibility-bot and Copilot and removed request for Copilot October 28, 2025 21:30
@smockle smockle enabled auto-merge October 28, 2025 21:32
@smockle smockle merged commit 57e18e4 into main Oct 30, 2025
5 checks passed
@smockle smockle deleted the smockle/group-dependabot-updates branch October 30, 2025 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants