From ba2b9a2d3087a48e3bca812c56f05dca979967be Mon Sep 17 00:00:00 2001 From: Kentaro Hayashi Date: Thu, 4 Jun 2026 11:24:57 +0900 Subject: [PATCH] ci: enable updates in groups Reduce piecemeal updates and rebase frequency. Signed-off-by: Kentaro Hayashi --- .github/dependabot.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bc63aca..a6a4ae0 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,3 +4,20 @@ updates: directory: '/' schedule: interval: 'monthly' + groups: + # PR: "Security update [package] from [old] to [new]" + # This PR should be merged in hurry + security-updates: + applies-to: security-updates + patterns: + - '*' + + # PR: "Bump [package] from [old] to [new]" + # No need to be merged this PR in hurry. It is enough to merge + # once in a month. + monthly-updates: + applies-to: version-updates + patterns: + - '*' + # Allow to create PR both of security and normal updates. + open-pull-requests-limit: 1