Skip to content

Reduce number of Dependabot PRs#247

Merged
mhucka merged 3 commits intoquantumlib:mainfrom
mhucka:adjust-dependabot
Apr 20, 2026
Merged

Reduce number of Dependabot PRs#247
mhucka merged 3 commits intoquantumlib:mainfrom
mhucka:adjust-dependabot

Conversation

@mhucka
Copy link
Copy Markdown
Contributor

@mhucka mhucka commented Apr 17, 2026

This changes 2 things:

  • Enable grouped updates. Instead of a separate PR for every package,
    Dependabot can combine them into a single "dependency update" PR.

  • Limit to direct dependencies. We can use the allow key to restrict it
    to only the packages you explicitly list in the requirements.in.

mhucka added 3 commits April 17, 2026 23:18
This changes 2 things:

- Enable grouped updates. Instead of a separate PR for every package,
  Dependabot can combine them into a single "dependency update" PR.

- Limit to direct dependencies. We can use the allow key to restrict it
  to only the packages you explicitly list in the `requirements.in`.
If `requirements.in` is changed, the list of dependencies in the
Dependabot config file should be updated too.
@mhucka mhucka marked this pull request as ready for review April 17, 2026 23:24
@mhucka mhucka requested a review from a team as a code owner April 17, 2026 23:24
@mhucka mhucka requested review from LalehB and viathor and removed request for a team April 17, 2026 23:24
Copy link
Copy Markdown
Collaborator

@LalehB LalehB left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Thanks.

@mhucka mhucka merged commit 56dd8d5 into quantumlib:main Apr 20, 2026
7 checks passed
@mhucka mhucka deleted the adjust-dependabot branch April 20, 2026 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants