[HDDS-10196] Group dependabot PRs for frontend dependencies

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Implemented
• Fix Version/s: 2.0.0
• Component/s: CI
• Labels: pull-request-available
• Target Version/s: 2.0.0
• Assignee: Attila Doroszlai
• Reporter: Attila Doroszlai
• Created: 24/Jan/24 09:11
• Updated: 26/Jan/24 18:25
• Resolved: 26/Jan/24 18:25

Description

I think only a single Recon dependency PR should be open at the same time. If it is still open when dependabot notices another potential version bump, it should be updated, instead of creating a new PR.

With the existing approach the same PNPM dependencies may be upgraded in multiple PRs. In each PR, the first commit (the one from dependabot) is focused on the specific dependency; the second commit (generated by the automation added for HDDS-9171) updates everything it can (any dependences with only lower bound). E.g. compare PR 6004 and PR 6005. So the PR/commit title does not reflect the actual change.

Issue Links

• relates to: HDDS-9171 Resolve dependabot build issues when updating npm packages
• links to: GitHub Pull Request #6084