search

ssec-jhu / evolver-ng

Next gen eVolver controller for bioreactor project - wip
BSD 3-Clause "New" or "Revised" License
3 stars 0 forks source link

Group dependabot PRs #61

Closed jamienoss closed 3 months ago

jamienoss commented 3 months ago

See group docs

This PR groups all minor and patch dependency updates into a single PR. All other dependencies will be opened as separate PRs, e.g.,:

security updates:

Note: If a grouped pull request for Dependabot version updates contains a vulnerable package, Dependabot security updates will still attempt to create a separate pull request to update the vulnerable package to a secure version. Creating a separate pull request for security updates ensures you have visibility into package vulnerabilities.

major updates:

If a dependency doesn't belong to any group, Dependabot will continue to raise single pull requests to update the dependency to its latest version as normal.