Skip to content

ci(dependabot): group dependency updates and reduce frequency #364

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 25, 2024

Conversation

mcous
Copy link
Collaborator

@mcous mcous commented Apr 23, 2024

Overview

This PR is modeled after a change I made to ease maintenance of npm-publish:

  • Group dependabot updates into a few important "themes"
  • Reduce PR frequency
  • Add GitHub Actions update checking for better CI security

Notes

  • Monthly works well for a single-maintainer project, but maybe we can tolerate a higher frequency here!
    • I think the current PR backlog is a sign that daily is at least excessive
  • I went of vibes for the groups; I like grouping linting and typechecking stuff into single PRs, because they tend to need each other, but other groups could be shifted and/or removed

@mcous mcous requested a review from yanick April 23, 2024 18:10
@mcous
Copy link
Collaborator Author

mcous commented Apr 25, 2024

@yanick have you got any feedback / opinions here? Happy to tweak this!

Alternatively, I'd understand if you'd prefer to continue to manage dependency updates one-by-one. If so, I can close this PR out and go deal with the existing PRs

@yanick
Copy link
Collaborator

yanick commented Apr 25, 2024

@yanick have you got any feedback / opinions here? Happy to tweak this!

That's a pretty darn good idea! Being warned of new versions is good, but on a daily basis that's indeed crossing the line between eager and maniacal. :-) I totally approve! 👍

@mcous mcous merged commit 334a759 into main Apr 25, 2024
16 checks passed
@mcous mcous deleted the combine-depedabot branch April 25, 2024 15:29
Copy link

🎉 This PR is included in version 5.2.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants