Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Define Dependabot groups for bundling package version updates #2577

Merged
merged 1 commit into from
Jun 10, 2024

Conversation

Eligioo
Copy link
Member

@Eligioo Eligioo commented Jun 10, 2024

What's in this pull request?

Introduce Dependabot groups for cargo crates and Github Actions to bundle version updates.

  • It only bundles minor and patch updates as major ones usually are considered breaking a need their own PR.
  • It only bundles version updates. Security updates still receive their own PR to not be depended on anything and can get merged easier.

By default, Dependabot raises a single pull request for each dependency that needs to be updated to a newer version. You can use groups to create sets of dependencies (per package manager), so that Dependabot opens a single pull request to update multiple dependencies at the same time.

@Eligioo Eligioo requested review from jsdanielh and hrxi June 10, 2024 15:09
@jsdanielh jsdanielh force-pushed the stefan/dependabot-bundle-version-updates branch from 5f4159f to 25ff5d6 Compare June 10, 2024 16:46
@jsdanielh jsdanielh merged commit 25ff5d6 into albatross Jun 10, 2024
6 checks passed
@jsdanielh jsdanielh deleted the stefan/dependabot-bundle-version-updates branch June 10, 2024 18:58
@jsdanielh jsdanielh added this to the Nimiq PoS Mainnet milestone Jun 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants