Improve Dependabot configuration for quality of life of developers#59
Improve Dependabot configuration for quality of life of developers#59samcunliffe merged 6 commits intomainfrom
Conversation
Monthly npm updates (but grouping unchanged). Group github-actions, but leave as weekly.
There was a problem hiding this comment.
Pull Request Overview
This PR improves the Dependabot configuration to reduce developer maintenance burden by adjusting update frequencies and grouping strategies. The changes shift npm dependency updates from weekly to monthly intervals while ensuring all GitHub Actions updates are grouped together.
Key changes:
- Changed npm package update interval from weekly to monthly
- Added grouping pattern for all GitHub Actions dependencies to consolidate updates
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| patterns: | ||
| - "*" |
There was a problem hiding this comment.
[nitpick] The wildcard pattern '*' will group all GitHub Actions updates together. Consider if you want to exclude major version updates from grouping (which are not currently excluded by update-types) to review breaking changes individually, or explicitly document this grouping choice affects all update types for Actions.
|
Bypassing as this doesn't change the JS code. |
* Improve Dependabot configuration Monthly npm updates (but grouping unchanged). Group github-actions, but leave as weekly. * Fix. * Refactor dependabot.yml patterns for clarity * Change Dependabot schedule from weekly to monthly * Refactor Dependabot groups for npm and GitHub actions Co-authored-by: Mosè Giordano <giordano@users.noreply.github.com>
but leave as weeklyand switch to monthly.