Group patch and minor Dependabot updates for easier approval/merging - #352
Merged
Conversation
|
Overall package sizeSelf size: 2.2 MB Dependency sizes| name | version | self size | total size | |------|---------|-----------|------------| | source-map | 0.7.6 | 185.63 kB | 185.63 kB | | pprof-format | 2.2.1 | 163.06 kB | 163.06 kB | | node-gyp-build | 4.8.4 | 13.86 kB | 13.86 kB |🤖 This report was automatically generated by heaviest-objects-in-the-universe |
IlyasShabi
approved these changes
Jun 16, 2026
szegedi
enabled auto-merge (squash)
June 16, 2026 09:38
Merged
szegedi
added a commit
that referenced
this pull request
Aug 11, 2026
branch-diff matches commits rather than content, so it reports commits whose
changes are already on v5.x. Two thirds of its output for v5.18.0 was noise.
The skill previously said only "skip commits that would result in empty
cherry-picks", which gives no way to tell those apart from real ones.
Document the three classes actually observed:
a. Commits subsumed by the squash-merged 5.14.2/5.14.3/5.14.4 releases.
Enumerated per release; a closed set that will not grow.
b. Dependabot bumps superseded by a later bump of the same package on v5.x.
Cherry-picking one downgrades the branch.
c. #154, the 6.0.0-pre bump on main, which must never reach a 5.x branch.
Applying these to `branch-diff v5.x main` yields exactly the 13 commits in the
v5.18.0 proposal.
Also add a `git diff --stat main` check before the version bump. An age-based
cutoff had dismissed #352 as a false positive when it was real and unapplied;
the content diff is what exposed it, so the skill now states that age alone is
not evidence and cites #352 as the counterexample.
Smaller fixes for things that misled during v5.18.0: pull both branches before
comparing, parse PR numbers from the trailing URL rather than the "(#NNN)" form
(which false-matches PR references in commit titles), clear the previous
release's worktree, and keep the version commit last on the branch.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What does this PR do?:
Modifies Dependabot config to allo grouping patch and minor bumps into single PRs (major updates remain individual for closer review.)
Motivation:
Save time by not having to deal with individual patch update PRs.