Group dependabot updates #1824
Group dependabot updates #1824
Conversation
To cut down on the number of PRs opened, have dependabot group all the updates for a component in a single pull request. Refs #1823.
|
Some times if you get lucky (really) there will be a "dependabot.yml validation" CI job, guess I didn't trigger it with this PR... so I think this syntax is right but not 100% sure. We can also try it on a docs repo first if people want. |
There was a problem hiding this comment.
Looking at some other projects that group dependabot updates by broad matching (eg https://github.com/cert-manager/approver-policy/blob/main/.github/dependabot.yaml) and the second example in your docs link that explains the group name (for branches/PRs), I think you're right. We can inspect the first few PRs to make sure we're getting the behaviour we want.
re the pre-merge validator, here's upstream :/
dependabot/dependabot-core#4605
And here are some other folks who've also been bitten by this and have been trying to revive the dependabot validator:
https://github.com/gnolang/gno/pull/1642/files
Status
Ready for review
Description
To cut down on the number of PRs opened, have dependabot group all the updates for a component in a single pull request.
Refs #1823.
Test Plan