Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependabot: grouped updates #148

Closed
github-product-roadmap opened this issue Jan 13, 2021 · 1 comment
Closed

Dependabot: grouped updates #148

github-product-roadmap opened this issue Jan 13, 2021 · 1 comment
Labels
all Product SKU: All cloud Available on Cloud dependabot Feature: GitHub Dependabot preview Feature phase: Preview shipped Shipped

Comments

@github-product-roadmap
Copy link
Collaborator

github-product-roadmap commented Jan 13, 2021 •
edited
Loading

Summary

Today, Dependabot generally sends one PR per package updated. Unfortunately, sometimes there are dependencies that ought to be updated together, and there's no way for developers to specify which ones.

Intended Outcome

To make Dependabot work better for developers and dependencies that need to be updated together.

How will it work?

We will allow developers to add configuration into their Dependabot.yml which lets them specify the set of dependencies that should be updated together.
@github github locked and limited conversation to collaborators Jan 13, 2021
@github-product-roadmap github-product-roadmap added all Product SKU: All cloud Available on Cloud ga Feature phase: Generally available security & compliance labels Jan 13, 2021
@Sid-ah Sid-ah removed the tpm staffed label Jun 9, 2021
@Sid-ah Sid-ah added the dependabot Feature: GitHub Dependabot label Sep 27, 2021
@Sid-ah Sid-ah moved this to Future in GitHub Public Roadmap Oct 8, 2021
@github-product-roadmap github-product-roadmap added preview Feature phase: Preview GHES 3.9 and removed ga Feature phase: Generally available labels Dec 14, 2022
jelster referenced this issue in jelster/space-truckers Jan 8, 2023
@jelster
Create dependabot.yml
9aceda0 
Only update what would be updated via `npm outdated`, do not update the package.json
@ankneis ankneis moved this from Future to Q1 2023 – Jan-Mar in GitHub Public Roadmap Jan 27, 2023
@ankneis ankneis moved this from Q1 2023 – Jan-Mar to Q2 2023 – Apr-Jun in GitHub Public Roadmap Mar 15, 2023
@ankneis ankneis added the shipped Shipped label Jul 10, 2023
@ankneis
Copy link
Collaborator

ankneis commented Jul 10, 2023

🚢 This has shipped: https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/. Closing as complete!

@ankneis ankneis closed this as completed Jul 10, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
all Product SKU: All cloud Available on Cloud dependabot Feature: GitHub Dependabot preview Feature phase: Preview shipped Shipped
Projects
GitHub Public Roadmap
Status: No status
Milestone
No milestone
Development

No branches or pull requests
3 participants
@Sid-ah @github-product-roadmap @ankneis