Skip to content

Add multi-ecosystem group to Dependabot config #264

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

parkerbxyz
Copy link
Contributor

  • Adds multi-ecosystem-groups with a new group named minor-and-patch, scheduled quarterly, to consolidate updates across ecosystems.
  • Changes the updates section to use patterns for dependency matching and assigned updates to the new multi-ecosystem-group.

@parkerbxyz parkerbxyz self-assigned this Jul 11, 2025
Copy link
Contributor

@gr2m gr2m left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

still working on it? Looks like an improvement to what we have right now.

Copy link

@robaiken robaiken left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The commit-message key needs to be added directly to the multi-ecosystem-groups section of your group definition, not nested within individual ecosystems

Comment on lines 13 to 22
groups:
production-dependencies:
production:
dependency-type: 'production'
update-types:
- minor
- patch
development-dependencies:
development:
dependency-type: 'development'
update-types:
- minor
Copy link

@robaiken robaiken Aug 13, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You can't nest groups inside multi-ecosystem configurations. The update-types and dependency-type settings need to be moved up to the same level as package-ecosystem, not nested within the groups section

schedule:
interval: 'monthly'
patterns: ['*']
multi-ecosystem-groups: 'minor-and-patch'
groups:

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This group should also be removed

Commit-message settings for minor-and-patch updates were relocated from the npm update section to the multi-ecosystem-groups.minor-and-patch section in dependabot.yml.
Removed the 'groups' section and moved 'update-types' directly under the GitHub Actions configuration.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants