Socket
Socket
Sign inDemoInstall

dependabot-combine

Package Overview
Dependencies
25
Maintainers
1
Versions
3
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    dependabot-combine

Combine dependabot PRs into a single branch.


Version published
Weekly downloads
1
decreased by-50%
Maintainers
1
Created
Weekly downloads
 

Readme

Source

dependabot-combine

A utility to automatically combine dependabot PRs into a single branch.

Supported package managers

Currently, yarn & npm are supported, and will be auto-detected. Dependabot branches for other package managers will be ignored.

Usage

npx dependabot-combine

To see all available options:

npx dependabot-combine --help

Options:

  • --branch-name: The name of the branch to create, where the dependabot PRs will be combined
  • --branch-pattern: The glob pattern to filter branches by. Default: **/dependabot/**
  • --delete-branch-if-exists (or -d): If set, the --branch-name branch will be deleted if it exists

How it works

Note that this will not actually combine the commits of the dependabot PRs themselves. The reason for this is that you'll often get merge conflicts when combining many PRs, which can be quite tiresome.

Instead, this utility will try to determine the package name & version from the commit message, and update it itself via yarn or npm. It will the use the nice commit message & body from the dependabot PR, including the changelog etc, and make a new commit.

Note that this means that certain special cases like e.g. PRs that update multiple packages at once will be skipped for now.

FAQs

Last updated on 03 Jun 2022

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc