What is a "grouped update" in Dependabot?

By default, Dependabot opens one separate pull request per dependency update, which can mean dozens of individual PRs for a large project with many outdated packages. Grouped updates let you configure Dependabot to bundle multiple related dependency updates into a single pull request instead, based on rules you define (like grouping all packages matching a name pattern, or all minor/patch updates together).

updates:
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"
    groups:
      dev-dependencies:
        dependency-type: "development"
      minor-and-patch:
        update-types: ["minor", "patch"]

This significantly reduces PR review overhead for teams managing many dependencies, consolidating what might otherwise be twenty separate low-risk patch-update PRs into one combined PR to review and merge, while still keeping genuinely higher-risk updates (like major version bumps) separate if configured that way.

Invest now in Acorns!!! 🚀
Join Acorns and get your $5 bonus!

Acorns is a micro-investing app that automatically invests your "spare change" from daily purchases into diversified, expert-built portfolios of ETFs. It is designed for beginners, allowing you to start investing with as little as $5. The service automates saving and investing. Disclosure: I may receive a referral bonus.

Invest now!!! Get Free equity stock (US, UK only)!

Use Robinhood app to invest in stocks. It is safe and secure. Use the Referral link to claim your free stock when you sign up!.

The Robinhood app makes it easy to trade stocks, crypto and more.

Webull! Receive free stock by signing up using the link: Webull signup.