Skip to content

chore: optimize dependabot configuration with grouping - #3268

Merged
lahirumaramba merged 4 commits into
mainfrom
lm-dependabot-config
Oct 7, 2026
Merged

lahirumaramba merged 4 commits into
mainfrom
lm-dependabot-config

Conversation

@lahirumaramba

@lahirumaramba lahirumaramba commented Oct 6, 2026 •

Copy link
Copy Markdown
Member

Optimizes the Dependabot configuration to reduce PR noise, and rebase churn.

  • Group npm updates:
    • eslint: Updates eslint, @eslint/*, typescript-eslint, and @typescript-eslint/* in lockstep.
    • firebase: Batches @firebase/* sibling packages together.
    • dev-dependencies: Batches non-breaking (minor and patch) devDependencies into a single weekly PR.
    • prod-dependencies: Batches non-breaking (minor and patch) production/optional dependencies into a single PR.
  • Add github-actions ecosystem: Monthly grouped updates for SHA-pinned GitHub Actions.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Dependabot configuration to optimize dependency updates, including setting schedules, limits, grouping dependencies, and ignoring ESM-only major bumps for packages like chai, gulp-filter, del, and chalk. It also introduces automated updates for GitHub Actions. The review feedback suggests expanding the ignore list to include other Chai-related packages (chai-as-promised, chai-exclude, and sinon-chai) that have also transitioned to ESM-only, ensuring consistent build and test environments.

Comment thread .github/dependabot.yml Resolved

@yvonnep165 yvonnep165 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Just the PR title still says "ignore rules" while the changes no longer include this.

@lahirumaramba lahirumaramba changed the title chore: optimize dependabot configuration with grouping and ignore rules chore: optimize dependabot configuration with grouping Oct 7, 2026
@lahirumaramba
lahirumaramba merged commit 3caf29a into main Oct 7, 2026
20 checks passed
@lahirumaramba
lahirumaramba deleted the lm-dependabot-config branch October 7, 2026 19:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants