Skip to content

ci: configure grouped updates in dependabot - #3557

Merged
swissspidy merged 5 commits into
v7from
ci/dependabot-groups
Sep 2, 2026
Merged

ci: configure grouped updates in dependabot#3557
swissspidy merged 5 commits into
v7from
ci/dependabot-groups

Conversation

@paulirish

@paulirish paulirish commented Sep 2, 2026

Copy link
Copy Markdown
Member

Stacked on #3556.

Consolidates Dependabot version updates into grouped pull requests for both npm dependencies and GitHub Actions workflows:

  • Groups npm updates into dependencies and devDependencies across scanned directories (/ and /packages).
  • Groups GitHub Actions updates into a single PR (actions).
  • Lowers open-pull-requests-limit from 5 to 2 for npm (matching the 2 groups) and keeps GitHub Actions at 1.

This halts individual PR spam and prevents conflicting package-lock.json churn across packages.

@paulirish
paulirish force-pushed the ci/dependabot-groups branch from 7f02c28 to 2c70d59 Compare September 2, 2026 01:51
Base automatically changed from fix/scorecard-token to v7 September 2, 2026 06:05
@swissspidy
swissspidy merged commit 21c1d8c into v7 Sep 2, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants