Skip to content

ci: group dependabot updates (gha, prod, dev) weekly#1166

Open
Hotell wants to merge 1 commit into
microsoft:mainfrom
Hotell:chore/dependabot-grouping
Open

ci: group dependabot updates (gha, prod, dev) weekly#1166
Hotell wants to merge 1 commit into
microsoft:mainfrom
Hotell:chore/dependabot-grouping

Conversation

@Hotell

@Hotell Hotell commented Jul 15, 2026

Copy link
Copy Markdown
Collaborator

Summary

Reduce Dependabot PR churn by grouping updates into a small number of weekly PRs instead of one PR per dependency.

Changes

Configured three update groups, each opened once per week:

  1. github-actions — all GitHub Actions bumps in a single PR.
  2. production-dependencies — all npm production deps in a single PR.
  3. development-dependencies — all npm development deps in a single PR.

The npm ecosystem uses directories: ['/**'] to cover all packages across the monorepo.

@github-actions

Copy link
Copy Markdown

📋 PR Validation Summary

Check the Build react library job summary for detailed reports:

  • 📦 Bundle Size — size comparison against the base branch

To view: click the link above → select the Build react library job → open the Summary tab.

@Hotell
Hotell marked this pull request as ready for review July 15, 2026 15:16
@Hotell
Hotell requested review from a team and PaulGMardling July 15, 2026 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant