Repository navigation
Group Go and npm minor updates per repository - #36
Merged
Merged
Conversation
Every Go module and npm package minor or patch update is its own dashboard entry today, about 970 across the three orgs, so keeping current means ticking hundreds of boxes and reviewing hundreds of one-line pull requests. Key features/changes: - Go module minor, patch and digest updates group into one pull request per repository, leaving the go and toolchain directives on their own - npm and Bun package minor and patch updates group the same way, leaving the Node.js runtime rule untouched - Majors stay one pull request each, and dashboard approval still applies
scotwells
approved these changes
Nov 3, 2026
kevwilliams
approved these changes
Nov 3, 2026
kevwilliams
left a comment
There was a problem hiding this comment.
Verified security fixes still open ungrouped, since Renovate's vulnerabilityAlerts defaults clear groupName, and the Go toolchain directive stays outside the Go group.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Keeping dependencies current takes hundreds of approvals today. Every Go module and npm package minor or patch update is its own dashboard entry and its own pull request, about 970 of them waiting across datum-cloud, datum-labs and milo-os.
This groups them, so each repository gets one Go pull request and one npm pull request for all its minor and patch updates. Majors still arrive one per pull request, the Node.js runtime rule is unchanged, and the dashboard still asks before opening anything.
Test plan