From 84efdee1a8ecea72a40644e5bbfc420a4c864a5c Mon Sep 17 00:00:00 2001 From: allo Date: Fri, 4 Sep 2026 10:28:47 +0800 Subject: [PATCH] chore(dependabot): group only minor/patch; majors as separate PRs --- .github/dependabot.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 77380de..ee3d408 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,4 +1,5 @@ -# Monthly, grouped version updates: at most one PR per ecosystem per month. +# Monthly version updates. Minor/patch bumps are grouped into one PR per ecosystem; +# major bumps get their own PR so a red CI points at a single dependency. # Security updates are handled separately by GitHub's alert flow. version: 2 @@ -11,6 +12,7 @@ updates: groups: npm-all: patterns: ["*"] + update-types: ["minor", "patch"] commit-message: prefix: chore - package-ecosystem: npm @@ -21,6 +23,7 @@ updates: groups: npm-all: patterns: ["*"] + update-types: ["minor", "patch"] commit-message: prefix: chore - package-ecosystem: github-actions