From a7549243950aa04d650c55c1d934493149230e6a Mon Sep 17 00:00:00 2001 From: Anna Singleton Date: Fri, 19 Dec 2025 11:46:59 +0000 Subject: [PATCH 1/4] ci: dependabot make one PR --- .github/dependabot.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index eff3e75..36a2d26 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,11 +4,26 @@ updates: directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 25 + groups: + uv: + patterns: + - "*" - package-ecosystem: github-actions directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 10 + groups: + github-actions: + patterns: + - "*" - package-ecosystem: gitsubmodule directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 10 + groups: + gitsubmodules: + patterns: + - "*" From e27fd897cb328738be304d61fbc2c581b5cd35d4 Mon Sep 17 00:00:00 2001 From: Will Speak Date: Thu, 12 Feb 2026 11:30:10 +0000 Subject: [PATCH 2/4] chore(dependabot): Don't Group Production UV Dependencies Update dependabot configuration to prevent grouping of production UV dependencies. This allows for more granular updates and better visibility into individual dependency changes. --- .github/dependabot.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 36a2d26..db40757 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,7 +6,8 @@ updates: interval: "weekly" open-pull-requests-limit: 25 groups: - uv: + dev-dependencies: + dependency-type: "development" patterns: - "*" - package-ecosystem: github-actions From 4c6b97d4a29fb94a1eedb823053a09ac4330ebcb Mon Sep 17 00:00:00 2001 From: Will Speak Date: Thu, 12 Feb 2026 11:43:33 +0000 Subject: [PATCH 3/4] Group dev dependencies, keep production deps as separate PRs - Dev dependencies grouped into single PR via dependency-type: development - Production dependencies get individual PRs for selective updates - Reduced github-actions and gitsubmodule limits to 1 (catch-all groups) --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index db40757..372baa1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -14,7 +14,7 @@ updates: directory: "/" schedule: interval: "weekly" - open-pull-requests-limit: 10 + open-pull-requests-limit: 1 groups: github-actions: patterns: @@ -23,7 +23,7 @@ updates: directory: "/" schedule: interval: "weekly" - open-pull-requests-limit: 10 + open-pull-requests-limit: 1 groups: gitsubmodules: patterns: From efe3f3f43aa12755ed9347f39ef509dde2888b9a Mon Sep 17 00:00:00 2001 From: Will Speak Date: Thu, 12 Feb 2026 11:51:08 +0000 Subject: [PATCH 4/4] Lower open PRs limit Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 372baa1..8b5707b 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,7 +4,7 @@ updates: directory: "/" schedule: interval: "weekly" - open-pull-requests-limit: 25 + open-pull-requests-limit: 5 groups: dev-dependencies: dependency-type: "development"