From 70dc7dd24fdd88982c910cd9d3355f4d9ffbc9a6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= Date: Thu, 8 Oct 2026 07:59:22 +0200 Subject: [PATCH] ci: group weekly patch and minor dependency updates into one pull request per kind --- .github/dependabot.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7d8e7f98f..22c71017d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,6 +10,19 @@ updates: applies-to: security-updates update-types: - "patch" + # One weekly pull request per dependency kind instead of a trickle of + # single bumps: patch and minor updates travel together and pass the + # same checks once. Majors stay single so each gets its own review. + production-weekly: + dependency-type: "production" + update-types: + - "patch" + - "minor" + development-weekly: + dependency-type: "development" + update-types: + - "patch" + - "minor" - package-ecosystem: "github-actions" directory: "/" schedule: