chore: remove dependabot groups#3145
Merged
Merged
Conversation
Remove package dependency groupings from the Dependabot configuration. Prior to this commit, we were seeing cases where NPM major version updates were falling into the `npm-minor` group. This caused related packages that were peer-dependent on one another's new major version to be split into separate PRs, causing each created PR to fail. One approach in #3142 was to move `npm-minor` to the bottom of the group list, and explicitly exclude each package in any group from `npm-minor`. This was tested to fix the above issue in a separate repo, but adds maintenance burden. As a result, we choose to simply remove the groups as they exist today The `mix-minor` group has been removed to keep with the same behavior as not having `npm-minor`.
Contributor
|
To clarify my previous comment, I meant that we could remove all groups other than the |
Contributor
Author
|
Ah, okay - I see what you're saying. Fixed in 6985503 (and PR desc updated) |
digitalcora
approved these changes
Jun 25, 2026
digitalcora
left a comment
digitalcora
left a comment
Contributor
There was a problem hiding this comment.
RIP, my beautiful groups...
Contributor
Author
|
Dependabot wasn't worthy. Renovatebot on the other hand, maybe some day 🌤️ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Asana task: N/A
Description
Remove package-specific dependency groupings from the Dependabot configuration. Prior to this commit, we were seeing cases where NPM major version updates were falling into the
npm-minorgroup. This caused related packages that were peer-dependent on one another's new major version to be split into separate PRs, causing each created PR to fail. The outcome following this PR is the same,but will require manual intervention from the dev team to fix cases of broken major version updates.
One approach in #3142 was to move
npm-minorto the bottom of the group list, and explicitly exclude each package in any group fromnpm-minor. This was tested to fix the above issue in a separate repo, but adds maintenance burden. As a result, we choose to simply remove the groups as they exist today