Skip to content

Replace dependabot with custom dependencies update action#1347

Merged
saskliutas merged 2 commits into
masterfrom
dependabot-allowed-bumps
May 14, 2026
Merged

Replace dependabot with custom dependencies update action#1347
saskliutas merged 2 commits into
masterfrom
dependabot-allowed-bumps

Conversation

@saskliutas
Copy link
Copy Markdown
Member

@saskliutas saskliutas commented May 14, 2026

Avoid major bumps when bumping deps

Replaced dependabot with custom actions that runs pnpm -r update. Dependabot does not support bumps following specified range.

Copilot AI review requested due to automatic review settings May 14, 2026 08:30
@saskliutas saskliutas requested a review from a team as a code owner May 14, 2026 08:30
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 14, 2026

⚠️ No Changeset found

Latest commit: ed4e25e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repository’s Dependabot configuration to prevent major-version dependency update PRs, keeping automated dependency maintenance limited to lower-risk changes.

Changes:

  • Restricts Dependabot version updates to semver minor and patch only via allow.update-types.

Comment thread .github/dependabot.yml Outdated
@saskliutas saskliutas changed the title [dependabot] Allow only minor and patch bumps Replace dependabot with custom dependencies update action May 14, 2026
@saskliutas saskliutas merged commit 540a81a into master May 14, 2026
15 checks passed
@saskliutas saskliutas deleted the dependabot-allowed-bumps branch May 14, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants