Files
OwnCord/.github
J3vbandClaude Opus 5 a39cd8e23c ci(deps): group Dependabot updates into one PR per ecosystem (#1357)
The 2026-08-10 refresh opened 17 PRs: ten gomod, four npm, three actions.
Each one rewrites its ecosystem's lockfile, so merging any single PR
invalidates every sibling, which then rebases and re-runs the full ~15
minute CI matrix. Clearing the batch sequentially costs 17 CI cycles for
one weekly dependency refresh.

A catch-all group per ecosystem makes that 4 PRs at most. It also keeps
release trains intact -- the seven OpenTelemetry modules in that batch are
one coordinated release and belong in one PR.

The stryker and vitest groups are removed because the npm catch-all
subsumes them; their reason for existing (exact peer pins across a family
break under a partial merge) is now the rationale for the whole scheme and
is recorded at the top of the file.

Majors are already ignored for every ecosystem, so each group only ever
carries patch and minor updates. A bad member goes on the ignore list
rather than ungrouping the rest.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-11 19:57:22 +02:00
..
2026-03-30 22:36:38 +02:00