From 69e6cd3f73dde120f365deb57f3de7a47334d7e8 Mon Sep 17 00:00:00 2001 From: Fabio Bonelli Date: Tue, 18 Aug 2026 20:54:47 +0200 Subject: [PATCH] chore: group dependabot updates and skip cooldown for our libs One pull request per ecosystem per run instead of one per dependency. The cooldown does not apply to github.com/italia/*: we control those releases, and a fix there is usually why the release happened. --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 38f1497..c6198d7 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,10 @@ updates: interval: "weekly" cooldown: default-days: 7 + groups: + github-actions: + patterns: + - "*" - package-ecosystem: "gomod" directory: "/" @@ -14,3 +18,11 @@ updates: interval: "weekly" cooldown: default-days: 7 + # Our own libraries: we control what goes into them, and a fix there + # is usually the reason for the release, so waiting a week defeats it. + exclude: + - "github.com/italia/*" + groups: + go-deps: + patterns: + - "*"