From 5d8ed130dbef7c33678d23fcdad48f514aa5cd01 Mon Sep 17 00:00:00 2001 From: Mickael Kasinski Date: Thu, 16 Jul 2026 18:20:38 +0200 Subject: [PATCH] ci: group Dependabot updates to reduce PR noise Add .github/dependabot.yml with grouped weekly updates: npm production and development dependencies each collapse into a single PR instead of one per package, and all GitHub Actions bumps land in one grouped PR. Also starts monitoring the github-actions ecosystem, which was not covered before. Co-Authored-By: Claude Opus 4.8 --- .github/dependabot.yml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..923a578 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,23 @@ +version: 2 +updates: + # npm dependencies — grouped to reduce PR noise + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + groups: + production-dependencies: + dependency-type: "production" + development-dependencies: + dependency-type: "development" + + # GitHub Actions — one grouped PR for all action bumps + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + github-actions: + patterns: + - "*"