chore: group dependabot updates and apply the pending ones - #47
Merged
Merged
Conversation
Dependabot watched each dependency on its own, so a run raised every bump
separately. Each ecosystem now declares a catch-all group, and both web apps
share a single npm entry through `directories`, so a run raises one batch per
ecosystem. The interval drops to monthly, since a grouped update is a batch
either way. Three ecosystems is the floor: a group cannot span Go, npm and
Actions.
The pending updates come along with it:
Go testify 1.11.1 -> 1.12.1, grpc 1.83.0 -> 1.83.1,
logrus 1.10.0 -> 1.10.1, urfave/cli/v3 3.10.1 -> 3.11.0
npm typescript 5.9.3 -> 7.0.2 and vite 7.3.6 -> 8.2.1 in both web apps,
@vitejs/plugin-react 5.2.0 -> 6.0.5 in the emulator
testify 1.12 reaches for go.yaml.in/yaml/v3 instead of go-spew and go-difflib,
which is the whole of the indirect churn in go.mod.
TypeScript 7 no longer accepts `esModuleInterop=false`: interop is always on,
and that in turn makes `allowSyntheticDefaultImports` redundant, so both come
out of the two tsconfigs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependabot watched each dependency on its own, so a run raised every bump separately. Each ecosystem now declares a catch-all group, and both web apps share a single npm entry through
directories, so a run raises one batch per ecosystem. The interval drops to monthly, since a grouped update is a batch either way. Three ecosystems is the floor: a group cannot span Go, npm and Actions.The pending updates come along with it:
Go testify 1.11.1 -> 1.12.1, grpc 1.83.0 -> 1.83.1,
logrus 1.10.0 -> 1.10.1, urfave/cli/v3 3.10.1 -> 3.11.0
npm typescript 5.9.3 -> 7.0.2 and vite 7.3.6 -> 8.2.1 in both web apps,
@vitejs/plugin-react 5.2.0 -> 6.0.5 in the emulator
testify 1.12 reaches for go.yaml.in/yaml/v3 instead of go-spew and go-difflib, which is the whole of the indirect churn in go.mod.
TypeScript 7 no longer accepts
esModuleInterop=false: interop is always on, and that in turn makesallowSyntheticDefaultImportsredundant, so both come out of the two tsconfigs.