Skip to content

chore(ci): group lockstep Go modules in Dependabot config - #449

Merged
manusa merged 1 commit into
mainfrom
chore/dependabot-gomod-groups
Oct 21, 2026
Merged

manusa merged 1 commit into
mainfrom
chore/dependabot-gomod-groups

Conversation

@manusa

@manusa manusa commented Oct 21, 2026

Copy link
Copy Markdown
Owner

Go modules that release in lockstep currently get one Dependabot PR each. Every merge rewrites native/go.mod and go.sum, so the sibling PRs conflict, and Dependabot later closes some of them as no longer needed (for example the OpenTelemetry PRs #434, #438 and #441). Grouping each family produces a single PR per release.

Groups added to the gomod entry for /native:

  • opentelemetry: go.opentelemetry.io/*
  • kubernetes: k8s.io/*, sigs.k8s.io/*
  • golang-x: golang.org/x/*

Go modules that release in lockstep get one Dependabot PR each, and every
merge rewrites native/go.mod and go.sum, so the sibling PRs conflict.
Group OpenTelemetry, Kubernetes and golang.org/x updates into one PR each.

Signed-off-by: Marc Nuri <marc@marcnuri.com>
@manusa
manusa merged commit dd00346 into main Oct 21, 2026
3 checks passed
@manusa
manusa deleted the chore/dependabot-gomod-groups branch October 21, 2026 05:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant