Skip to content

chore(deps): group npm updates by development and production - #193

Merged
yordis merged 1 commit into
mainfrom
yordis/chore-dependabot-dev-prod-groups
Oct 19, 2026
Merged

yordis merged 1 commit into
mainfrom
yordis/chore-dependabot-dev-prod-groups

Conversation

@yordis

@yordis yordis commented Oct 19, 2026 •

Copy link
Copy Markdown
Member
  • Splitting npm upgrades by tool family produced a PR per family every week, each needing its own review and merge, and their lockfile edits conflicted with one another.
  • Development and production upgrades carry different risk, so reviewing them as two batches matches how we judge them.

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>
@cursor

cursor Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

PR Summary

Low Risk
Only Dependabot grouping metadata changes; no application code or runtime dependency resolution behavior is modified.

Overview
Dependabot npm grouping for /tsworkspace is simplified from per-ecosystem bundles (Vite/Vitest, React, Tailwind, Testing Library, plus a minor/patch catch-all) to two weekly PRs: npm-development and npm-production, using dependency-type instead of package name patterns.

This should cut down parallel lockfile churn and conflicting PRs while aligning review batches with how dev vs runtime dependency bumps are assessed.

Reviewed by Cursor Bugbot for commit 2e50155. Bugbot is set up for automated code reviews on this repo. Configure here.

@yordis
yordis merged commit e9c8e07 into main Oct 19, 2026
27 checks passed
@yordis
yordis deleted the yordis/chore-dependabot-dev-prod-groups branch October 19, 2026 17:07
@coderabbitai

coderabbitai Bot commented Oct 19, 2026

Copy link
Copy Markdown

Review in Change Stack →

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 4a87ad54-cc3b-4b98-bae2-e6fafd5bc54a
📥 Commits

Reviewing files that changed from the base of the PR and between f8df52c and 2e50155.

📒 Files selected for processing: 1
  • .github/dependabot.yml
+----------------------------------------------------------+
| Solving problems you didn't know you were about to have. |
+----------------------------------------------------------+
  \
   \     /)/)
        ( '')
        /  |
      o(___)
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant