Skip to content

Set package ecosystem to 'gradle' in dependabot config#2671

Merged
riccardobl merged 1 commit into
masterfrom
riccardobl-patch-1
Apr 3, 2026
Merged

Set package ecosystem to 'gradle' in dependabot config#2671
riccardobl merged 1 commit into
masterfrom
riccardobl-patch-1

Conversation

@riccardobl

Copy link
Copy Markdown
Member

No description provided.

@riccardobl riccardobl merged commit 481b48b into master Apr 3, 2026
5 checks passed

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a Dependabot configuration file to automate dependency updates for the Gradle ecosystem. The review suggests increasing the open pull request limit, grouping dependencies to reduce noise, and adding the github-actions ecosystem to ensure CI workflows remain secure.

Comment thread .github/dependabot.yml
Comment on lines +7 to +11
updates:
- package-ecosystem: "gradle" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: "weekly"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

For a project with a significant number of dependencies (as seen in gradle/libs.versions.toml), the default open-pull-requests-limit of 5 can lead to stalled updates if multiple dependencies are outdated. Increasing this limit and using groups to bundle updates will improve maintainability by reducing pull request noise. Additionally, including the github-actions ecosystem is a best practice for keeping CI workflows secure and up to date.

updates:
  - package-ecosystem: "gradle"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 10
    groups:
      gradle-dependencies:
        patterns:
          - "*"

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"

@yaRnMcDonuts yaRnMcDonuts added this to the v3.10.0 milestone Apr 14, 2026
@riccardobl riccardobl deleted the riccardobl-patch-1 branch May 28, 2026 21:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants