Files
Sven ScharmentkeandClaude Opus 4.8 ebd638570b ci(deps): collapse Dependabot into one grouped PR per ecosystem (#55)
## Summary

Stops Dependabot from opening a flurry of separate dependency PRs. The
pip group was scoped to `update-types: [minor, patch]`, which meant any
update Dependabot didn't classify into that set dropped out of the group
and got its own PR. That is exactly what produced the three docs-tooling
PRs (#51, #52, #53), and it would also split off every major-version
bump.

This removes the `update-types` filter so the `*` pattern groups **all
packages and all bump types** into one PR.

## Behavior after this change

- **pip**: one grouped PR per weekly run, covering both `pyproject.toml`
and `requirements-docs.txt`.
- **github-actions**: one grouped PR per weekly run (already configured
this way).

## Note on scope

Dependabot cannot combine different ecosystems into a single PR, so the
realistic minimum is one PR per ecosystem (pip + github-actions). A
grouped PR also means a breaking major bump rides along with everything
else; if that ever blocks the group, we can split majors back out with a
dedicated `update-types: [major]` rule.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-08 20:20:54 +02:00

48 lines
1.1 KiB
YAML

version: 2
updates:
# Python dependencies (pyproject.toml and requirements-docs.txt)
- package-ecosystem: "pip"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
timezone: "UTC"
open-pull-requests-limit: 10
reviewers:
- "svnscha"
labels:
- "dependencies"
- "python"
commit-message:
prefix: "deps(python)"
groups:
# One PR for every pip update across all manifests in this directory
# (pyproject.toml and requirements-docs.txt). Omitting update-types means
# major bumps join the group too, instead of each opening its own PR.
python:
patterns:
- "*"
# GitHub Actions workflow dependencies
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
timezone: "UTC"
open-pull-requests-limit: 5
reviewers:
- "svnscha"
labels:
- "dependencies"
- "github-actions"
commit-message:
prefix: "ci(deps)"
groups:
# Group all GitHub Actions updates
actions:
patterns:
- "*"