From e83e1f321104c0b92c0317ab28338ad7d4926b2b Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 9 Mar 2026 10:34:37 +0000 Subject: [PATCH 1/4] Initial plan From a32276509b8ec5d0f108a51a1ff664d390294d1c Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 9 Mar 2026 10:36:11 +0000 Subject: [PATCH 2/4] ci: consolidate dependabot config to prevent mass PR openings Co-authored-by: BENZOOgataga <50145143+BENZOOgataga@users.noreply.github.com> --- .github/dependabot.yml | 71 +++---------------- ...309103504-consolidate-dependabot-config.md | 3 + 2 files changed, 13 insertions(+), 61 deletions(-) create mode 100644 .releases/unreleased/20260309103504-consolidate-dependabot-config.md diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0b388560..128964ee 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,11 @@ updates: day: "monday" time: "06:00" timezone: "UTC" + open-pull-requests-limit: 5 + groups: + github-actions: + patterns: + - "*" - package-ecosystem: "npm" directory: "/" @@ -15,65 +20,9 @@ updates: day: "monday" time: "06:00" timezone: "UTC" - open-pull-requests-limit: 10 - rebase-strategy: "auto" - - - package-ecosystem: "npm" - directory: "/apps/api" - schedule: - interval: "weekly" - day: "monday" - time: "06:00" - timezone: "UTC" - open-pull-requests-limit: 10 - rebase-strategy: "auto" - - - package-ecosystem: "npm" - directory: "/apps/web" - schedule: - interval: "weekly" - day: "monday" - time: "06:00" - timezone: "UTC" - open-pull-requests-limit: 10 - rebase-strategy: "auto" - - - package-ecosystem: "npm" - directory: "/apps/worker" - schedule: - interval: "weekly" - day: "monday" - time: "06:00" - timezone: "UTC" - open-pull-requests-limit: 10 - rebase-strategy: "auto" - - - package-ecosystem: "npm" - directory: "/packages/db" - schedule: - interval: "weekly" - day: "monday" - time: "06:00" - timezone: "UTC" - open-pull-requests-limit: 10 - rebase-strategy: "auto" - - - package-ecosystem: "npm" - directory: "/packages/shared" - schedule: - interval: "weekly" - day: "monday" - time: "06:00" - timezone: "UTC" - open-pull-requests-limit: 10 - rebase-strategy: "auto" - - - package-ecosystem: "npm" - directory: "/packages/sim" - schedule: - interval: "weekly" - day: "monday" - time: "06:00" - timezone: "UTC" - open-pull-requests-limit: 10 + open-pull-requests-limit: 5 rebase-strategy: "auto" + groups: + npm-all: + patterns: + - "*" diff --git a/.releases/unreleased/20260309103504-consolidate-dependabot-config.md b/.releases/unreleased/20260309103504-consolidate-dependabot-config.md new file mode 100644 index 00000000..d0af97c1 --- /dev/null +++ b/.releases/unreleased/20260309103504-consolidate-dependabot-config.md @@ -0,0 +1,3 @@ +type: patch +area: ci +summary: Consolidate Dependabot config to a single grouped npm entry to prevent mass PR openings From d4a992bcad5eb19d2f4b54a007d5c6687b8574f8 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 9 Mar 2026 10:40:00 +0000 Subject: [PATCH 3/4] ci: set dependabot to monthly schedule with limit of 1 PR Co-authored-by: BENZOOgataga <50145143+BENZOOgataga@users.noreply.github.com> --- .github/dependabot.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 128964ee..51f35991 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,11 +3,11 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "monthly" day: "monday" time: "06:00" timezone: "UTC" - open-pull-requests-limit: 5 + open-pull-requests-limit: 1 groups: github-actions: patterns: @@ -16,11 +16,11 @@ updates: - package-ecosystem: "npm" directory: "/" schedule: - interval: "weekly" + interval: "monthly" day: "monday" time: "06:00" timezone: "UTC" - open-pull-requests-limit: 5 + open-pull-requests-limit: 1 rebase-strategy: "auto" groups: npm-all: From e755f232933f14c8a020c81c0efe8ef3c41a0d64 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 9 Mar 2026 10:47:52 +0000 Subject: [PATCH 4/4] fix: add missing YAML front matter delimiters to release note Co-authored-by: BENZOOgataga <50145143+BENZOOgataga@users.noreply.github.com> --- .../unreleased/20260309103504-consolidate-dependabot-config.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.releases/unreleased/20260309103504-consolidate-dependabot-config.md b/.releases/unreleased/20260309103504-consolidate-dependabot-config.md index d0af97c1..2a12cce3 100644 --- a/.releases/unreleased/20260309103504-consolidate-dependabot-config.md +++ b/.releases/unreleased/20260309103504-consolidate-dependabot-config.md @@ -1,3 +1,5 @@ +--- type: patch area: ci summary: Consolidate Dependabot config to a single grouped npm entry to prevent mass PR openings +---