Skip to content

Conversation

@afternoon2
Copy link
Contributor

  • Add auto-merge workflow for dependabot to actually update and merge PRs if the CI passes
  • Add grouping PRs to reduce the amount of PRs submitted by dependabot

groups:
all-dependencies:
patterns:
- "*"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does that group multiple dep updates in a single PR?

I don't mind a lot of PRs, and I think keeping the granularity is better

with:
github-token: "${{ secrets.GITHUB_TOKEN }}"

- name: Update PR branch with main
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hm is that needed? we do squash-commits anyway

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You mean the update with main branch, or Enable auto-merge for all dependency updates?

Because I noticed that in existing PRs dependabot was often stuck when having a branch behind the master.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, why update the main branch. How and why was it stuck?

@adamw
Copy link
Member

adamw commented Jul 31, 2025

Btw., we are adding dependency + automerge tags for backend dep updates, and dependencies + javascript for frontend updates. Maybe we can unify this somehow?

@afternoon2 afternoon2 merged commit 5b4851f into master Aug 4, 2025
11 checks passed
@afternoon2 afternoon2 deleted the fix/dependabot-improvements branch August 4, 2025 07:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants