Skip to content

Commit f351253

Browse files
authored
Treat Python Package managers as distinct groups (dependabot#11129)
We grouped the Python PR's to avoid noise. However, what I've observed in practice is we (and our users) care more about staying up to date on the package managers and not so much if the internal libraries used in our helpers stay up to date. So by breaking the package managers themselves out as distinct groups, it allows us to quickly move forward on those, without getting blocked if there's a breaking change in a minor helper library. Here's an example of exactly this problem: * dependabot#11107 (comment)
1 parent 4d2f901 commit f351253

File tree

1 file changed

+9
-4
lines changed

1 file changed

+9
-4
lines changed

.github/dependabot.yml

+9-4
Original file line numberDiff line numberDiff line change
@@ -123,20 +123,25 @@ updates:
123123
groups:
124124
common:
125125
patterns:
126-
- pip
126+
- hashin
127127
- cython
128128
- flake8
129-
poetry:
129+
# Keep the package managers themselves separate because they are higher risk
130+
# and also higher visibility--ie, users generally want latest, so we don't
131+
# want breakage in the `common` group to prevent updating package manager versions
132+
pip:
130133
patterns:
131-
- poetry
132-
- hashin
134+
- pip
133135
pip-tools:
134136
patterns:
135137
- pip-tools
136138
pipenv:
137139
patterns:
138140
- pipfile
139141
- pipenv
142+
poetry:
143+
patterns:
144+
- poetry
140145
- package-ecosystem: "pub"
141146
directory: "/pub/helpers"
142147
schedule:

0 commit comments

Comments
 (0)