Skip to content

Some Dependabot Improvements - #170

Merged
desrosj merged 6 commits into
trunkfrom
improve-dependabot
May 28, 2026
Merged

Some Dependabot Improvements#170
desrosj merged 6 commits into
trunkfrom
improve-dependabot

Conversation

@desrosj

@desrosj desrosj commented May 27, 2026

Copy link
Copy Markdown
Member

This makes several improvements to dependabot.yml.

  • Increase the number of concurrent pull requests allowed.
  • Add a default cooldown value of 7.
  • Configure grouping for GitHub Actions updates.
  • Configure npm dependency updates.

desrosj added 4 commits May 27, 2026 13:14
This configures GitHub Actions updates to group all minor and patch versions together, but create separate PRs for each major update.
@desrosj desrosj self-assigned this May 27, 2026
@desrosj
desrosj requested a review from Copilot May 27, 2026 17:27
@github-actions

Copy link
Copy Markdown

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message.

Co-authored-by: desrosj <desrosj@git.wordpress.org>

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repository’s Dependabot configuration to increase throughput and expand automated update coverage (GitHub Actions + npm), while attempting to add cooldown and grouping behavior.

Changes:

  • Raises open-pull-requests-limit from 10 to 20.
  • Adds a cooldown default of 7 days.
  • Adds grouping configuration and introduces a new npm update configuration.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/dependabot.yml
Comment thread .github/dependabot.yml Outdated
Comment thread .github/dependabot.yml
@desrosj
desrosj merged commit 3285aa1 into trunk May 28, 2026
9 checks passed
@desrosj
desrosj deleted the improve-dependabot branch May 28, 2026 04:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants