Group dependabot updates (#4012)

Azure · May 15, 2024 · 01bc003 · 01bc003
1 parent 93719a0
commit 01bc003
Showing 1 changed file with 46 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -11,15 +11,61 @@ updates:
     schedule:
       interval: "weekly"
     rebase-strategy: "disabled"
+    groups:
+      # Group updates together, so that they are all applied in a single PR.
+      # Grouped updates are currently in beta and is subject to change.
+      # xref: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
+      k8s-go-deps:
+        applies-to: version-updates  # security-updates would need a separate entry but for now lets try this
+        patterns:
+          - "k8s.io/*"
+          - "sigs.k8s.io/*"
+      go-deps:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "k8s.io/*"
+          - "sigs.k8s.io/*"
   # ASO v2 asoctl
   - package-ecosystem: "gomod" 
     directory: "/v2/cmd/asoctl" 
     schedule:
       interval: "weekly"
     rebase-strategy: "disabled"
+    # Group updates together, so that they are all applied in a single PR.
+    # Grouped updates are currently in beta and is subject to change.
+    # xref: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
+    k8s-go-deps:
+      applies-to: version-updates  # security-updates would need a separate entry but for now lets try this
+      patterns:
+        - "k8s.io/*"
+        - "sigs.k8s.io/*"
+    go-deps:
+      applies-to: version-updates
+      patterns:
+        - "*"
+      exclude-patterns:
+        - "k8s.io/*"
+        - "sigs.k8s.io/*"
   # ASO v2 generator
   - package-ecosystem: "gomod" 
     directory: "/v2/tools/generator" 
     schedule:
       interval: "weekly"
     rebase-strategy: "disabled"
+    # Group updates together, so that they are all applied in a single PR.
+    # Grouped updates are currently in beta and is subject to change.
+    # xref: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
+    k8s-go-deps:
+      applies-to: version-updates  # security-updates would need a separate entry but for now lets try this
+      patterns:
+        - "k8s.io/*"
+        - "sigs.k8s.io/*"
+    go-deps:
+      applies-to: version-updates
+      patterns:
+        - "*"
+      exclude-patterns:
+        - "k8s.io/*"
+        - "sigs.k8s.io/*"