From 7cb82852854e6b5388dc7198ce3acbd2309043bf Mon Sep 17 00:00:00 2001 From: Pablo Rodriguez Date: Wed, 23 Sep 2026 04:24:17 -0700 Subject: [PATCH] cap the open dependabot backlog and group what needs no separate review Co-Authored-By: Claude Opus 5 (1M context) --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5ace460..3bd3654 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,6 +1,14 @@ version: 2 +# One grouped pull request per ecosystem per week is the normal case; the cap is what keeps a +# missed week from compounding into a backlog. updates: - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 + groups: + # Majors are grouped here too: an action pin merges on green with no model either way, so a + # separate pull request per major buys nothing but CI minutes. + actions: + patterns: ["*"]