-
-
Notifications
You must be signed in to change notification settings - Fork 225
Description
Issue submitter TODO list
- I've searched for an already existing issues here
- I'm running a supported version of the application which is listed here and the feature is not present there
Is your proposal related to a problem?
Dependabot doesn’t support placing a single dependency into more than one dependency group.
If a dependency matches more than one rule, it’s assigned to the first group that matches.
As a result, we can’t receive both minor and major grouped updates for the same dependency. This forces us to choose one type of grouping or the other. This is particularly limiting for dependencies that are supported long term like Spring where we we'd like to be aware of the existence of major upgrades(that often have breaking changes we cannot merge right away) while also merge minor upgrades in the meantime(that bring various patches and feature improvements)
See : dependabot/dependabot-core#13665
Describe the feature you're interested in
We should look into Renovate and see if we can integrate it alongside Dependabot to enable this option.
Describe alternatives you've considered
Continue using Dependabot and acknowledge the limitation
Version you're running
Additional context
See #1542 (comment)