Skip to content

chore(dependabot): Group security updates - #6725

Merged
guilload merged 2 commits into
mainfrom
david-yaffe/group-dependabot-security-updates
Aug 27, 2026
Merged

chore(dependabot): Group security updates#6725
guilload merged 2 commits into
mainfrom
david-yaffe/group-dependabot-security-updates

Conversation

@dayaffe

@dayaffe dayaffe commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

Summary

  • group Cargo security updates into a single PR
  • group npm security updates into a single PR
  • group GitHub Actions security updates into a single PR
  • leave Docker update handling unchanged

Each security group is scoped to its own package ecosystem and does not affect the existing version-update groups.

Testing

  • make fmt
  • parsed .github/dependabot.yml with Ruby's YAML parser
  • git diff --check

@dayaffe
dayaffe requested a review from a team as a code owner August 26, 2026 20:07

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8edc0e2ce2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/dependabot.yml
@dayaffe

dayaffe commented Aug 27, 2026

Copy link
Copy Markdown
Contributor Author

/ci-run-all-tests

@dayaffe dayaffe changed the title Group Dependabot security updates chore(dependabot): Group Dependabot security updates Aug 27, 2026
@dayaffe dayaffe changed the title chore(dependabot): Group Dependabot security updates chore(dependabot): Group security updates Aug 27, 2026

@pront pront left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good idea to create dedicated groups for these. This should help us close security gaps faster.

@guilload
guilload merged commit 73c076e into main Aug 27, 2026
11 checks passed
@guilload
guilload deleted the david-yaffe/group-dependabot-security-updates branch August 27, 2026 19:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants