Dependabot suggestion

[ccoVeille]

May I suggest you to use the groups feature in dependabot?

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups

This could reduce the number of PRs

You can have a look at what was done in this repository when I suggested it

Zxilly/go-size-analyzer@ec9c028

It would drastically reduce the number of PRs opened by dependabot because they will be grouped.

[ccoVeille]

This request is somehow related to

• Switch to monthly Dependabot schedule #10351

[chris48s]

We do use groups for bumping packages that need to be upgraded in step e.g:

shields/.github/dependabot.yml

Lines 19 to 32 in 848e409

	groups:
	# All official @docusaurus/* packages should have the exact same version as @docusaurus/core.
	# From https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups:
	# "You cannot apply a single grouping set of rules to both version updates and security
	# updates [...] you must define two, separately named, grouping sets of rules"
	# See https://github.com/badges/shields/issues/10242 for more information.
	docusaurus-version-updates:
	applies-to: version-updates
	patterns:
	- '@docusaurus/*'
	docusaurus-security-updates:
	applies-to: security-updates
	patterns:
	- '@docusaurus/*'

Conceptually, I prefer not to lump them together arbitrarily.

What is your motivation for raising this issue? As someone who does not review PRs on this repo, what difference does it make how we manage this?

[ccoVeille]

I'm watching the repository, and I'm getting so much notification about dependabot updates that wants to bump things

[ccoVeille]

My issue finds some replies in what posted there

#10351 (comment)

While reducing the frequency could help, I think that some dependency could get bumped together

[chris48s]

OK. Personally I find a PR like this
encode/httpx#3233
is just unhelpful to try and review and difficult to unpick if something fails. I care about that more than the number of notifications.

If you like this feature and want to use it on your own repos, enjoy.

If you want to watch the repo anyway, maybe GitHub's watch settings can help you focus on the stuff you are interested in:

[ccoVeille]

I understand. Thanks for replying