Skip to content

Dependabot: Change npm groupings to prioritise grouping minor/patch version bumps - #1457

Open
mbg wants to merge 1 commit into
mainfrom
mbg/improve-dependabot
Open

Dependabot: Change npm groupings to prioritise grouping minor/patch version bumps#1457
mbg wants to merge 1 commit into
mainfrom
mbg/improve-dependabot

Conversation

@mbg

@mbg mbg commented Aug 4, 2026

Copy link
Copy Markdown
Member

Follow-up change to #1413 since we don't need a separate group for minor/patch-level octokit updates. One group for all minor/patch-level updates is enough.

Copilot AI balanced review requested due to automatic review settings August 4, 2026 13:28
@mbg
mbg requested a review from a team as a code owner August 4, 2026 13:28

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Prioritizes a single Dependabot group for all npm minor and patch updates.

Changes:

  • Moves npm-minor before package-specific groups.
  • Allows major Octokit updates to remain grouped separately.
Show a summary per file
File Description
.github/dependabot.yml Reorders and simplifies npm dependency groups.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 1/1 changed files
  • Comments generated: 0
  • Review effort level: Balanced

@henrymercer henrymercer left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this will create separate PRs for each major/minor/patch octokit bump, and instead we should include update-types: ["major"].

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants