This is an automated email from the ASF dual-hosted git repository. jacopoc pushed a commit to branch trunk in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit aa8624c262d340f79ba4bd7460933d4c3c86d56b Author: Jacopo Cappellato <[email protected]> AuthorDate: Thu Oct 22 10:53:05 2026 +0200 Group Dependabot updates and check for them weekly Each Dependabot pull request runs the CI workflows on ubuntu-latest runners, a limited resource shared by all the ASF projects: when it is opened, again each time it is rebased after another pull request is merged, and once more when it is merged. With daily checks and one pull request per dependency, this added up to many builds for routine updates. Check for updates weekly instead of daily, and group the minor and patch updates of each gradle, npm and github-actions entry in a single pull request. Major updates, which need a closer review, still get their own pull request. The codeql-action group stays first, so it still collects the init and analyze actions, major updates included. The docker entries have a single base image and need no group. Document the schedule and the grouping in README-CI-CD.md. Co-Authored-By: Claude Opus 5.5 <[email protected]> --- .github/README-CI-CD.md | 2 ++ .github/dependabot.yml | 66 ++++++++++++++++++++++++++++++++++++------------- 2 files changed, 51 insertions(+), 17 deletions(-) diff --git a/.github/README-CI-CD.md b/.github/README-CI-CD.md index b811037ac9..3297a0c315 100644 --- a/.github/README-CI-CD.md +++ b/.github/README-CI-CD.md @@ -57,6 +57,8 @@ To label the PRs merged before `pr-type-label.yml` existed, run it manually from Read **only from `trunk`**. +Updates are checked weekly. The minor and patch updates of each ecosystem and branch are grouped in a single PR; major updates get their own PR. + Updates: - GitHub Actions - Docker base images diff --git a/.github/dependabot.yml b/.github/dependabot.yml index eacd5b87b8..f4d2412140 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -18,17 +18,25 @@ # Please see the documentation for all configuration options: # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates +# Each update runs the CI workflows on its pull request, again on each rebase +# after another pull request is merged, and once more when it is merged. +# To keep the number of jobs low, the updates are checked weekly and the minor +# and patch updates of each entry are grouped in a single pull request, while +# major updates, which need a closer review, still get their own pull request. +# A dependency is put in the first group it matches. + version: 2 updates: - package-ecosystem: "gradle" directory: "/" schedule: - interval: "daily" + interval: "weekly" open-pull-requests-limit: 40 - #groups: - # all-dependencies: - # patterns: - # - "*" + groups: + minor-and-patch: + update-types: + - "minor" + - "patch" ignore: - dependency-name: "*" update-types: @@ -42,12 +50,13 @@ updates: - "java" - "release_branch" schedule: - interval: "daily" + interval: "weekly" open-pull-requests-limit: 40 - #groups: - # all-dependencies: - # patterns: - # - "*" + groups: + minor-and-patch: + update-types: + - "minor" + - "patch" ignore: - dependency-name: "*" update-types: @@ -66,14 +75,24 @@ updates: - package-ecosystem: "npm" directory: "themes/common-theme/webapp/common-theme/js" schedule: - interval: "daily" + interval: "weekly" open-pull-requests-limit: 20 + groups: + minor-and-patch: + update-types: + - "minor" + - "patch" - package-ecosystem: "npm" directory: "framework/rest-api" schedule: - interval: "daily" + interval: "weekly" open-pull-requests-limit: 20 + groups: + minor-and-patch: + update-types: + - "minor" + - "patch" - package-ecosystem: "npm" directory: "themes/common-theme/webapp/common-theme/js" @@ -83,18 +102,27 @@ updates: - "javascript" - "release_branch" schedule: - interval: "daily" + interval: "weekly" open-pull-requests-limit: 20 + groups: + minor-and-patch: + update-types: + - "minor" + - "patch" - package-ecosystem: github-actions directory: / schedule: - interval: daily + interval: weekly groups: codeql-action: patterns: - "github/codeql-action/init" - "github/codeql-action/analyze" + minor-and-patch: + update-types: + - "minor" + - "patch" - package-ecosystem: github-actions directory: / @@ -104,17 +132,21 @@ updates: - "github_actions" - "release_branch" schedule: - interval: daily + interval: weekly groups: codeql-action: patterns: - "github/codeql-action/init" - "github/codeql-action/analyze" + minor-and-patch: + update-types: + - "minor" + - "patch" - package-ecosystem: docker directory: / schedule: - interval: daily + interval: weekly - package-ecosystem: docker directory: / @@ -124,4 +156,4 @@ updates: - "docker" - "release_branch" schedule: - interval: daily + interval: weekly
