Cap the PR budget at five: bundle Dependabot minor/patch updates - #157
Merged
Conversation
…e rule The first live Dependabot sweep opened 21 individual PRs at once (its per-block limits summed to exactly that). New policy, now written down in CLAUDE.md: at most 5 PRs exist at any time, for work batches and bots alike. Every dependabot block bundles its minor+patch updates into one collective PR (github-actions bundles everything - actions bump majors routinely and the SHA-pinned usages keep the diff reviewable) and carries open-pull-requests-limit 1, so majors queue behind the collective PR instead of fanning out.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Follow-up to the first live Dependabot sweep, which opened 21 individual PRs at once. New policy (recorded in CLAUDE.md): at most 5 PRs at any time, for work batches and bots alike. Each dependabot block now bundles minor+patch updates into one collective PR (github-actions bundles everything) and carries open-pull-requests-limit 1 - a hard total cap of 5, with majors queuing behind the collective PR.
On its next scheduled run Dependabot will supersede the remaining individual backlog PRs with the collective ones.