From 587879dd6139d1ccfb0650c5a781c1ede205f211 Mon Sep 17 00:00:00 2001 From: Rein Krul Date: Mon, 22 Jun 2026 09:31:47 +0200 Subject: [PATCH] Group dependabot updates into weekly PRs Switch github-actions, gomod, and docker ecosystems from daily, ungrouped updates to weekly grouped PRs (minor+patch). Major version bumps stay outside the groups so they remain individually reviewable. Assisted by AI --- .github/dependabot.yml | 29 +++++++++++++++++++++++++---- 1 file changed, 25 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 848221e4f4..38f9564c3f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,21 +5,42 @@ updates: # checks workflow files in /.github/workflows directory: "/" schedule: - interval: "daily" + interval: "weekly" + groups: + github-actions: + patterns: + - "*" + update-types: + - "minor" + - "patch" # Go - package-ecosystem: "gomod" # checks /go.mod directory: "/" schedule: - interval: "daily" + interval: "weekly" + groups: + go-modules: + patterns: + - "*" + update-types: + - "minor" + - "patch" # Docker - package-ecosystem: "docker" # checks /Dockerfile directory: "/" schedule: - interval: "daily" + interval: "weekly" + groups: + docker: + patterns: + - "*" + update-types: + - "minor" + - "patch" # Python (PRs disabled) - package-ecosystem: "pip" @@ -28,4 +49,4 @@ updates: schedule: interval: "weekly" # Allow up to 0 open pull requests for pip dependencies - open-pull-requests-limit: 0 \ No newline at end of file + open-pull-requests-limit: 0