dependabot / dependabot/dependabot-core

Place all ungrouped dependencies into a single pull request

Open
#7,758 1 comment 3 reactions 0 assignees View on GitHub
F: grouped-updates 🎳 T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

I would like updates to all dependencies that don't match any group definitions to go into a single pull request. Currently, to achieve this requires creating an "other" group and explicitly listing each of these dependencies in it. This creates a maintenance burden when dependencies change.

One way of achieving this is to (optionally) constrain each dependency to belong to a single group. Groups should be defined in priority order, so if a dependency matches multiple groups, it will belong to the one highest in the list. One could then define an `other` group at the end with a pattern of `"*"` to group up any unmatched dependencies.

There is another benefit to mutually exclusive groups: If group 1 is `*prettier*` and group 2 is `*eslint*`, you don't need to use `exclude-patterns` to prevent `eslint-plugin-prettier` appearing in both groups.

The above is just a suggestion. There may be other ways to solve this problem.

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named. Start by locating the dependency grouping logic and its configuration handling, then determine whether mutually exclusive, priority-ordered groups or another approach best groups unmatched dependencies; done means unmatched dependencies share one pull request without explicit maintenance of every dependency.

Written by the indexing model from the issue text.

Assessment

Tech stack
ruby
Domain
tooling
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.