Repository navigation
Dependabot: one PR for each provider SDK - #1568
Conversation
Replace the provider-sdks group with group-by: dependency-name, so each SDK gets its own PR that bumps both apps/desktop and apps/ade-cli. Raise the open PR limit from 2 to 6, one for each watched SDK. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub. |
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: 56bd2fa1-43b1-48f4-9184-3b45a4df408f) |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configuration
📒 Files selected for processing (1)
Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review. 📝 WalkthroughWalkthroughDependabot now creates separate update groups for each SDK by dependency name. Each group can include updates from both configured directories. The open-PR limit increases from two to six. ChangesDependabot SDK Updates
Priority: ⬇️ Low Estimated code review effort: 2 (Simple) | ~8 minutes Change: Other Suggested labels: Merge Risk: ⚪ Minimal · up to The configuration supports the intended per-SDK updates across both app directories. No actionable mergeability risk was identified. Pre-merge checks |
 |
| Check name | Status | Explanation |
|---|---|---|
| Description Check |  |
Check skipped - CodeRabbit’s high-level summary is enabled. |
| Title check | |
The title clearly describes the main change: Dependabot will create a separate PR for each provider SDK. |
| Docstring Coverage | |
No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0… |
| Linked Issues check | |
Check skipped because no linked issues were found for this pull request. |
| Out of Scope Changes check | |
Check skipped because no linked issues were found for this pull request. |
✨ Finishing Touches
🧪 Generate unit tests (beta)
- Commit to this branch
- Create a new PR
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Comment @coderabbitai help to get the list of available commands.
1 participant
Change
provider-sdksgroup with agroup-by: dependency-namegroup. Each SDK gets its own PR. That PR bumps the SDK in bothapps/desktopandapps/ade-cli, so the two folders stay on the same version.open-pull-requests-limitfrom 2 to 6, one for each watched SDK.The owner asked for one PR for each bump, so the Dependabot automation runs once for each SDK.
Check
After the merge, Dependabot should open one PR each for Claude Agent SDK, Codex, Cursor, OpenCode CLI and OpenCode client.
🤖 Generated with Claude Code
Note
Low Risk
CI/automation config only; no application runtime or security logic changes.
Overview
Dependabot now opens one PR per provider SDK instead of batching all six into a shared group.
The old
provider-sdkspattern group is replaced witheach-provider-sdkusinggroup-by: dependency-name, so a single PR still bumps the same package in bothapps/desktopandapps/ade-cli.open-pull-requests-limitgoes from 2 to 6 so each watched SDK can have its own open bump PR at once.Reviewed by Cursor Bugbot for commit 11163c9. Configure here.
Summary by CodeRabbit