Skip to content

Reduce Dependabot pull request noise#3676

Open
reakaleek wants to merge 2 commits into
mainfrom
smart-dependabot-grouping-strategy-here-are-effect
Open

Reduce Dependabot pull request noise#3676
reakaleek wants to merge 2 commits into
mainfrom
smart-dependabot-grouping-strategy-here-are-effect

Conversation

@reakaleek

Copy link
Copy Markdown
Member

Why

Dependabot currently creates large weekly bursts of unrelated and duplicate pull requests, increasing review and CI overhead. Elastic-owned actions also use intentional floating major tags that should not be replaced by exact minor versions.

What

Group routine minor and patch updates by ecosystem while keeping unrelated major upgrades isolated. Preserve compatibility-sensitive Tailwind and System.IO.Abstractions families, consolidate repeated GitHub Action upgrades across directories, group security updates per ecosystem, and retain floating major tags for Elastic actions while still allowing major-version proposals.

Made with Cursor

Reduce update noise while preserving isolated major upgrades and compatibility-sensitive dependency families.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Keep established compatibility groupings ahead of the new catch-all update batches.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automation packaging, ci/cd.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant