Files
zitadel/.github/dependabot.yml
Elio Bischof d14a23ae7e chore(deps): group easily mergable dependabot PRs (#9689)
# Which Problems Are Solved

Dependabot creates a PR for each individual dependency update. This is
noisy and toil.

# How the Problems Are Solved

The easily mergable updates are grouped into fewer PRs.
Major updates and security updates are not grouped, as they might need
special attention.
For the github-actions updates, also the major updates are grouped, as
we have immediate and good enough feedback from the pipeline if a new
major doesn't work.

# Additional Changes

The e2e dependencies are also auto-updated.

# Additional Context

- We aggreed on grouping the dependabot PRs in todays Scrum daily.
- I don't know how to test the config. We might just have to merge it
and look how it goes 🤷‍♂️
2025-04-02 15:57:47 +03:00

76 lines
1.4 KiB
YAML

version: 2
updates:
- package-ecosystem: npm
groups:
console:
applies-to: version-updates
patterns:
- "*"
update-types:
- "minor"
- "patch"
directories:
- "/console"
- "/e2e"
schedule:
interval: weekly
time: "02:00"
labels:
- "npm"
- "dependencies"
open-pull-requests-limit: 10
commit-message:
prefix: chore
include: scope
- package-ecosystem: gomod
groups:
go:
applies-to: version-updates
patterns:
- "*"
update-types:
- "minor"
- "patch"
directory: "/"
schedule:
interval: weekly
time: "02:00"
labels:
- "gomod"
- "dependencies"
open-pull-requests-limit: 10
commit-message:
prefix: chore
include: scope
- package-ecosystem: "docker"
groups:
docker:
applies-to: version-updates
patterns:
- "*"
update-types:
- "minor"
- "patch"
directory: "/build"
schedule:
interval: "weekly"
time: "02:00"
open-pull-requests-limit: 10
commit-message:
prefix: chore
include: scope
- package-ecosystem: "github-actions"
groups:
actions:
applies-to: version-updates
patterns:
- "*"
directory: "/"
schedule:
interval: weekly
time: "02:00"
open-pull-requests-limit: 10
commit-message:
prefix: chore
include: scope