Dependabot commits making commit history noisy

[elliotgunton]

Dependabot commits making commit history noisy

[flaviuvadan]

I agree. We can use groups

[elliotgunton]

@flaviuvadan nice! The SemVer example makes sense for us to use I think - minors should be less frequent and we can review them individually, vs all these patches making the commit history noisy 👍

You can also specify grouping settings based on how updates affect a specific ecosystem and follow semantic versioning (SemVer). This means you can, for example, group all patch updates together. This approach helps Dependabot create as few pull requests as possible, while also reducing the chances of accidentally accepting changes that could cause issues. If a package follows SemVer, there's a higher chance (but not a guarantee) that minor and patch updates will be backwards compatible.