From 95154b2030c798c0aacb075b546a2173e87daf26 Mon Sep 17 00:00:00 2001 From: John Bampton Date: Thu, 12 Mar 2026 12:48:48 +1000 Subject: [PATCH] Group dependabot updates to reduce repo noise https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/optimizing-pr-creation-version-updates#grouping-related-dependencies-together refs https://github.com/apache/shiro/pull/2621 Example Shiro dependabot file at the bottom they are using "groups" https://github.com/apache/shiro/blob/main/.github/dependabot.yml https://github.com/apache/sedona/blob/master/.github/dependabot.yml Only just got this merged for the pre-commit updates in the last day on Shiro and Sedona. I forgot to add the groups to my last mgem-list PR. --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ed19517..c94ba56 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,11 +5,23 @@ updates: directory: '/' schedule: interval: 'daily' + groups: + github-dependencies: + patterns: + - '*' - package-ecosystem: 'github-actions' directory: '/' schedule: interval: 'daily' + groups: + github-dependencies: + patterns: + - '*' - package-ecosystem: 'pre-commit' directory: '/' schedule: interval: 'daily' + groups: + github-dependencies: + patterns: + - '*'