Skip to content

Group Dependabot minor/patch updates into weekly PRs - #49

Merged
kgrizz-git merged 2 commits into
mainfrom
cursor/dependabot-weekly-groups-7dc6
Aug 3, 2026
Merged

Group Dependabot minor/patch updates into weekly PRs#49
kgrizz-git merged 2 commits into
mainfrom
cursor/dependabot-weekly-groups-7dc6

Conversation

@kgrizz-git

@kgrizz-git kgrizz-git commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Summary

Update Dependabot so regular (minor/patch) version bumps are grouped into weekly PRs instead of one PR per dependency.

Changes

  • Schedule Dependabot checks for Monday (weekly) for both pip and github-actions
  • Group minor + patch updates into:
    • python-minor-and-patch
    • github-actions-minor-and-patch
  • Leave major updates ungrouped so they still open as individual PRs for review

CI fix

coverage-pr failed with fatal: origin/main...HEAD: no merge base after main advanced while this PR was open. Root cause: git fetch --depth=1 of the PR base leaves a shallow tip with no merge-base once main moves. This branch fetches the base with full history for diff-cover and the changelog check.

Sync

Rebased onto main after #48 merged (CHANGELOG conflict resolved).

Docs

  • CHANGELOG.md Unreleased note
  • dev-docs/HARNESS_ENGINEERING.md Dependabot + coverage fetch notes
Open in Web Open in Cursor 

@coderabbitai

coderabbitai Bot commented Aug 3, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: afc4e88a-5a32-4318-bab6-acb2911af8d9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

@coderabbitai review

Privacy gate passed for 2d7c137.

@kgrizz-git
kgrizz-git marked this pull request as ready for review August 3, 2026 03:30
@cursor
cursor Bot force-pushed the cursor/dependabot-weekly-groups-7dc6 branch from 2d7c137 to f99eb94 Compare August 3, 2026 03:38
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

@coderabbitai review

Privacy gate passed for f99eb94.

cursoragent and others added 2 commits August 3, 2026 03:41
Keep weekly Monday checks for pip and GitHub Actions, but open one grouped
PR per ecosystem for routine minor/patch bumps. Major upgrades remain
ungrouped so they can be reviewed individually.

Co-authored-by: kgrizz-git <kgrizz-git@users.noreply.github.com>
Shallow --depth=1 fetches of main left no merge-base once main advanced
past the branch point, crashing the coverage-pr job. Fetch the base
branch with full history for diff-cover and the changelog check.

Co-authored-by: kgrizz-git <kgrizz-git@users.noreply.github.com>
@cursor
cursor Bot force-pushed the cursor/dependabot-weekly-groups-7dc6 branch from f99eb94 to 904dafa Compare August 3, 2026 03:42
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

@coderabbitai review

Privacy gate passed for 904dafa.

@kgrizz-git
kgrizz-git merged commit 84d3373 into main Aug 3, 2026
15 checks passed
@kgrizz-git
kgrizz-git deleted the cursor/dependabot-weekly-groups-7dc6 branch August 3, 2026 03:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants