Support grouping of pull requests

[greysteil]

From @StephanBijzitter on November 20, 2017 12:19

Currently Dependabot creates one pull request per updated dependency, and while this is generally awesome, it is not always preferred.

For example, I would like to update React and React-DOM at the same time, but right now that means I have to merge Dependabot's pull request into another pull request by Dependabot.

I'd like to propose a mechanic similar to @dependabot rebase, where this is handled automatically for you. @dependabot group with #123 would open a new pull request which includes the changes of both the current pull request and pull request #123. This would also be very useful for @types/x dependencies.

Example:

• PR Bump nock from 9.0.28 to 9.1.0 in /helpers/yarn #123 updates React - pull request fails
• PR Support Python libraries #124 updates React-DOM - pull request fails
• user types @dependabot group with #123 on the Support Python libraries #124 pull request
• Dependabot opens PR Bump prettier from 1.8.1 to 1.8.2 in /helpers/yarn #125 with updates for React and React-DOM - pull request succeeds
• Dependabot closes Bump nock from 9.0.28 to 9.1.0 in /helpers/yarn #123 and Support Python libraries #124

Optionally, dependabot could probably also remember which dependencies to group together.

Copied from original issue: dependabot/feedback#52

[greysteil]

That's a really nice idea - I'm totally behind that as a UI solution for this.

It'll need quite a bit of work on our backend (which currently assumes PR are for one dependency only) but we need to do that work anyway. Once it's done, I'll look at implementing this.

Thanks masses for the suggestion!

[greysteil]

From @StephanBijzitter on November 20, 2017 13:3

Going to link a few issues together here:

This would resolve #5: Handle upgrades that require upgrading multiple dependencies at once

And would very likely lay the groundwork for #11: Option for single pull request per update (or that request lays the groundwork for this request, whichever you do first I guess)

[greysteil]

I'm sorry, I messed up. I thought it would be better to have feedback live on this repo, but I was wrong. I'm moving this back to a feedback repo, over at https://github.com/dependabot/feedback/issues. Sorry for the comment spam.