Some Dependabot Improvements - #170
Conversation
This configures GitHub Actions updates to group all minor and patch versions together, but create separate PRs for each major update.
|
The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message. To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook. |
There was a problem hiding this comment.
Pull request overview
This PR updates the repository’s Dependabot configuration to increase throughput and expand automated update coverage (GitHub Actions + npm), while attempting to add cooldown and grouping behavior.
Changes:
- Raises
open-pull-requests-limitfrom 10 to 20. - Adds a
cooldowndefault of 7 days. - Adds grouping configuration and introduces a new
npmupdate configuration.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This makes several improvements to
dependabot.yml.7.npmdependency updates.