137 words, 1 min read
Found this nice snippet / pattern in the documentation of dependabot:
In this example, the
dependabot.ymlfile:
- Creates a group called
angular.- Uses
patternsthat match with the name of a dependency to include dependencies in the group.- Uses
update-typeto only includeminororpatchupdates in the group.- Applies the grouping to version updates only, since
applies-to: version-updatesis used.version: 2updates:- package-ecosystem: "npm"directory: "/"schedule:interval: "weekly"groups:# Specify a name for the group, which will be used in pull request titles# and branch namesangular:applies-to: version-updatespatterns:- "@angular*"update-types:- "minor"- "patch"As a result:
- Dependabot will create a grouped pull request for all Angular dependencies that have a minor or patch update.
- All major updates will continue to be raised as individual pull requests.
If this post was enjoyable or useful for you, please share it! If you have comments, questions, or feedback, you can email my personal email. To get new posts, subscribe use the RSS feed.