Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Group updates across different ecosystems #8126

Open
1 task done
lorengordon opened this issue Oct 2, 2023 · 4 comments
Open
1 task done

Group updates across different ecosystems #8126

lorengordon opened this issue Oct 2, 2023 · 4 comments
Labels
F: grouped-updates 🎳 Relates to bumping more than one dependency in a single PR Keep Exempt this from being marked by stalebot T: feature-request Requests for new features

Comments

@lorengordon
Copy link
Contributor

lorengordon commented Oct 2, 2023

Is there an existing issue for this?

  • I have searched the existing issues

Feature description

If I have a project using several package-ecosystem configurations, I would like to use the new groups feature to create a Dependabot PR that includes updates across multiple ecosystems. For example, I may be using Dependabot for docker, terraform, and pip. Currently, I have three separate groups, one for each eco-system, and so I get three separate PRs. Instead, I would like to get a single PR.

@lorengordon lorengordon added the T: feature-request Requests for new features label Oct 2, 2023
@jakecoffman jakecoffman added the F: grouped-updates 🎳 Relates to bumping more than one dependency in a single PR label Oct 9, 2023
@abdulapopoola abdulapopoola pinned this issue Oct 9, 2023
@abdulapopoola
Copy link
Member

abdulapopoola commented Oct 9, 2023

Thanks for raising this; the crew is starting to explore this. Tagging @honeyankit and @Nishnha

@deki
Copy link

deki commented Jan 8, 2024

This would be very useful. I have projects with multiple package ecosystem definitions per Maven POM and can't group them right now since #2178 isn't implemented.

@RolfMoleman
Copy link

This would be brilliant for us

@abdulapopoola abdulapopoola unpinned this issue Mar 4, 2024
jim pushed a commit to chicago-tool-library/circulate that referenced this issue Mar 18, 2024
# What it does

Reconfigure dependabot to run weekly instead of daily, and have it batch
updates into a few groups.

# Why it is important

Dependabot has proven to be moderately noisy when running daily, so I
think it's worth trying to see if batching feels easier to manage.

# Implementation notes

* There are a lot of tools for deciding what gets batched together. As I
start I tried splitting out rails and linter updates from others, but
it'll be easy to tweak these as we learn more.
* Notably [dependabot cannot batch updates across package ecosystems
yet](dependabot/dependabot-core#8126), so
rails upgrades will still likely need to be done manually so we sync the
npm and ruby packages.

# Your bandwidth for additional changes to this PR

_Please choose one of the following to help the project maintainers
provide the appropriate level of support:_

- [x] I have the time and interest to make additional changes to this PR
based on feedback.
@jonjanego jonjanego added the Keep Exempt this from being marked by stalebot label May 2, 2024
@sethjeffery
Copy link

sethjeffery commented May 6, 2024

We have a private repo that publishes both a ruby gem and npm package, and would greatly benefit from grouping these together in dependabot PRs for other consuming repos, so that both can be updated at once.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
F: grouped-updates 🎳 Relates to bumping more than one dependency in a single PR Keep Exempt this from being marked by stalebot T: feature-request Requests for new features
Projects
None yet
Development

No branches or pull requests

7 participants