Skip to content

ci(dependabot): group minor and patch updates weekly - #91

Open
ryanleecode wants to merge 2 commits into
mainfrom
ci/mergify-org-policy
Open

ryanleecode wants to merge 2 commits into
mainfrom
ci/mergify-org-policy

Conversation

@ryanleecode

Copy link
Copy Markdown
Contributor

What

.github/dependabot.yml: every ecosystem keeps its directories and weekly schedule, and gets a grouped minor + patch update group (the github-actions group is renamed github-actions-minor-patch and limited to minor and patch), so majors arrive as separate PRs and patch/minor updates can merge under the org Dependabot rule.

.mergify.yml already extends the org policy and names this repo's checks, so it is unchanged.

@kiro-systemf kiro-systemf Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed by the lead session (not the author): .mergify.yml extends .github; every check named in queue/merge conditions exists in this repo's recent check runs; dependabot.yml (where present) parses and limits auto groups to minor/patch; no private terms in a public repo.

@kiro-systemf

kiro-systemf Bot commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

conductor-org verdict: not merging. check (format) is red at 38b5865 after the merge-up. The dependabot grouping change gets re-cut and formatted from current main rather than another merge-up; this PR closes when the replacement opens.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants