Skip to content

ci(dependabot): group PR & cooldown#118

Open
eyenx wants to merge 1 commit intomainfrom
ci/dependabot-group
Open

ci(dependabot): group PR & cooldown#118
eyenx wants to merge 1 commit intomainfrom
ci/dependabot-group

Conversation

@eyenx
Copy link
Copy Markdown
Contributor

@eyenx eyenx commented Apr 13, 2026

  • Recent events show us it is good practice to have a 7 day cooldown before new updates are pushed to the repo, even as a branch.
  • This PR also incorporates grouping of ci & gomod deps

Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>
@eyenx eyenx requested review from a team as code owners April 13, 2026 06:37
Comment thread .github/dependabot.yml
groups:
actions:
patterns:
- "*"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

curious whether we want to define the groups in gomod.
for example "k8s.io", etc.

Copy link
Copy Markdown
Member

@pree pree left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like the cooldown. Let's test the grouping, we can still refine it at a later stage in case we don't like how it behaves.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants