Dependabot grouped updates

[Pliner]

Hey,

Using grouped updates could help to reduce noise produced by Dependabot (many PRs, many notifications) and reduce efforts needed (no need to approve PRs individually and so on).

https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/

The simplest configuration might look like this.

version: 2
updates:
  - package-ecosystem: "pip"
    directory: "/"
    schedule:
      interval: "monthly"
    groups:
      packages:
        patterns:
          - "*"

Of course, dependencies might be split to multiple groups (dev dependencies like linters/docs and release ones).

[tomchristie]

Ohhh that'd be nice.

Any example PRs on public projects that we can take a look at for review purposes?
(Not necessarily a blocker tho)

[Pliner]

I have only experience using it in private company GH repos with python services with large dependency graphs (it was a quite useful Dependabot feature).

However, I have pushed the same dependabot.yml changes to the public repository I have access to, this is how a "grouped" PR looks like.