Skip to content

Group dependabot updates for pip and github-actions - #15223

Merged
Pierre-Sassoulas merged 2 commits into
pytest-dev:mainfrom
Pierre-Sassoulas:dependabot-groups
Oct 21, 2026
Merged

Pierre-Sassoulas merged 2 commits into
pytest-dev:mainfrom
Pierre-Sassoulas:dependabot-groups

Conversation

@Pierre-Sassoulas

Copy link
Copy Markdown
Member

One PR per ecosystem instead of one per dependency, as done in pylint-dev/pylint#11289. This reduce greatly the number of dependency upgrade PR we need to approve/merge.

One PR per ecosystem instead of one per dependency, as done in
pylint-dev/pylint#11289.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@Pierre-Sassoulas Pierre-Sassoulas added dependencies pull requests that update a dependency file skip news used on prs to opt out of the changelog requirement labels Oct 19, 2026
@Pierre-Sassoulas
Pierre-Sassoulas merged commit 9225e4f into pytest-dev:main Oct 21, 2026
36 checks passed
@Pierre-Sassoulas
Pierre-Sassoulas deleted the dependabot-groups branch October 21, 2026 06:47
Pierre-Sassoulas added a commit to pytest-dev/pluggy that referenced this pull request Nov 3, 2026
* Group dependabot updates for github-actions

One PR per week for all actions instead of one per action, as done in
pylint-dev/pylint#11289 and pytest-dev/pytest#15223.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* Add a grouped dependabot entry for the uv lockfile

Pluggy had no entry for uv.lock, so only security updates were touching
it, one dependency at a time (and sometimes downgrading others, see
74cbfa2). Same weekly schedule and cooldown as github-actions.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies pull requests that update a dependency file skip news used on prs to opt out of the changelog requirement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants