Turns out Dependabot has a new "grouped updates" feature which solves this: https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/
I implemented that here and it's addressed the problem perfectly: https://github.com/simonw/simonwillisonblog/blob/d88187ff23230e369d69eb461150f01fedab6a57/.github/dependabot.yml
Simon Willison /
npub13v…4w5eu
2023-08-03 22:13:31
in reply to nevent1q…98w4
Author Public Key
npub13v97j0kknscwnf5pt87nsn7cxzxwfwl3dsu7ss8qsq7ukmqgwg8q84w5euPublished at
2023-08-03 22:13:31Event JSON
{
"id": "fdbf00cd7563f7cac491d0eeafc9a09361fc635c02c7839902583cb3351f37a0",
"pubkey": "8b0be93ed69c30e9a68159fd384fd8308ce4bbf16c39e840e0803dcb6c08720e",
"created_at": 1691100811,
"kind": 1,
"tags": [
[
"e",
"158e4ac399ec5e134d149a8d1aa32b2ba02ac9de1c338f9380064b345ffeb86d",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://fedi.simonwillison.net/users/simon/statuses/110827982789095649",
"activitypub"
]
],
"content": "Turns out Dependabot has a new \"grouped updates\" feature which solves this: https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/\n\nI implemented that here and it's addressed the problem perfectly: https://github.com/simonw/simonwillisonblog/blob/d88187ff23230e369d69eb461150f01fedab6a57/.github/dependabot.yml",
"sig": "bfb5f77ec210824d0749d630f8427a962b22e39c383682cad93dec564b6b42226d049b994833dca00d15a95782a78d33f197a19f9b2f46904422c32033ed0282"
}