Skip to content

chore: group dependabot updates for actions and pip#160

Merged
d-v-b merged 5 commits into
mainfrom
chore/improve-dependabot-grouping
May 12, 2026
Merged

chore: group dependabot updates for actions and pip#160
d-v-b merged 5 commits into
mainfrom
chore/improve-dependabot-grouping

Conversation

@lhoupert
Copy link
Copy Markdown
Contributor

@lhoupert lhoupert commented Apr 21, 2026

Summary

  • Group all GitHub Actions dependency bumps (minor, patch, and major) into a single weekly PR — reduces noise from individual action updates.
  • Group minor and patch Python (pip) dependency updates into one PR; major bumps remain ungrouped so they surface individually for deliberate review.

Test plan

  • After merge, verify Dependabot creates grouped PRs on next weekly run (Wednesday 09:00)

🤖 Generated with Claude Code

- Group all GitHub Actions bumps (minor, patch, major) into one PR
- Group minor and patch pip bumps into one PR; major bumps remain
  ungrouped for individual review

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@lhoupert lhoupert requested a review from d-v-b April 21, 2026 14:38
lhoupert and others added 3 commits April 21, 2026 15:39
uv ecosystem reads uv.lock directly, enabling Dependabot to raise PRs
for lockfile-pinned versions including security patches.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@lhoupert lhoupert removed the request for review from d-v-b April 21, 2026 15:15
@lhoupert lhoupert requested a review from d-v-b April 21, 2026 15:38
@EOPF-Explorer EOPF-Explorer deleted a comment from github-actions Bot Apr 21, 2026
@d-v-b d-v-b merged commit 4196a67 into main May 12, 2026
5 checks passed
@github-actions github-actions Bot mentioned this pull request May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants