Skip to content

Add Dependabot groupings for gomod and GitHub Actions#110

Merged
jSherz merged 1 commit intomainfrom
copilot/add-grouping-to-dependabot-config
May 3, 2026
Merged

Add Dependabot groupings for gomod and GitHub Actions#110
jSherz merged 1 commit intomainfrom
copilot/add-grouping-to-dependabot-config

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 3, 2026

Without groupings, Dependabot opens individual PRs for each dependency update, creating noise for large ecosystems like hashicorp/* and golang.org/x/*.

Go modules

  • hashicorp — all github.com/hashicorp/* (terraform-plugin-framework, hcl, go-plugin, etc.)
  • golang-org-x — all golang.org/x/* (crypto, net, sys, text, tools, etc.)
  • google — all google.golang.org/* (grpc, protobuf, genproto)

GitHub Actions

  • actionsactions/checkout + actions/setup-go
  • hashicorphashicorp/setup-terraform

Ungrouped actions (crazy-max/ghaction-import-gpg, goreleaser/goreleaser-action, golangci/golangci-lint-action) have no natural peers and remain individual.

@jSherz jSherz marked this pull request as ready for review May 3, 2026 09:52
@jSherz jSherz merged commit 377f0d2 into main May 3, 2026
3 checks passed
@jSherz jSherz deleted the copilot/add-grouping-to-dependabot-config branch May 3, 2026 09:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants