search

warp-tech / warpgate

Smart SSH, HTTPS and MySQL bastion that requires no additional client-side software
Apache License 2.0
3.93k stars 122 forks source link

Group dependabot version bump prs if they are minor or patch bumps #1049

Closed kekonn closed 2 months ago

kekonn commented 2 months ago

Based on the docs.

Unfortunately I can't test this, but according to the documentation examples, this should make dependabot group all version bump PRs into a single PR per package manager. Only major version bumps and security issues are still raised as separate PRs.

I also removed the PR limit, since this setting probably makes more sense than simply limiting the dependabot PRs.

kekonn commented 2 months ago

Incidentally, maybe running these checks should be conditional based on which directories contain changes?

Eugeny commented 2 months ago

Let's see if it works :+1:

kekonn commented 2 months ago

Well it definitely grouped 16 PRs together for the web version.

Edit: Some of the remaining dependabot PRs are really old. If you ask dependabot to try and rebase them, it might just close them.