Skip to content

Group Dependabot updates to reduce PR volume#91

Draft
lukeinthecity wants to merge 1 commit into
mainfrom
chore/dependabot-grouping
Draft

Group Dependabot updates to reduce PR volume#91
lukeinthecity wants to merge 1 commit into
mainfrom
chore/dependabot-grouping

Conversation

@lukeinthecity

Copy link
Copy Markdown
Owner

Follow-up to the 12-PR Dependabot burst: turning on three ecosystems at once opened one PR per dependency. This groups them so a routine weekly cycle lands as a few PRs instead of a dozen.

What changed (.github/dependabot.yml)

  • github-actions — all action bumps batch into one PR (low-risk, rarely need individual review).
  • npm (root), npm (desktop), pip — minor + patch bumps group into one PR per ecosystem.

What deliberately stays individual

  • Major-version bumps — they get their own PR so breaking changes are reviewed in isolation (exactly the electron 40→43, jsdom 24→29, eslint 8→10 cases from this cycle).
  • Security updates — unaffected by grouping; they keep opening promptly on their own, so vulnerability fixes aren't delayed behind a weekly batch.

Config-only change. Takes effect on Dependabot's next scan.

🤖 Generated with Claude Code

https://claude.ai/code/session_01A28CjhQi4MxhZgfAKB4CQh


Generated by Claude Code

Enabling three ecosystems at once produced a burst of 12 individual
update PRs. Group minor+patch bumps into one PR per ecosystem (npm root,
npm desktop, pip) and batch all github-actions bumps together, so a
routine weekly cycle lands as a few grouped PRs instead of one per
dependency.

Major-version bumps stay individual (they get their own review, e.g. the
electron/jsdom majors this cycle), and security updates are unaffected —
they keep opening promptly on their own.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A28CjhQi4MxhZgfAKB4CQh
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants