Repository navigation
Remove samples-old and group Dependabot updates - #1361
Merged
Vladimir Morozov (vmoroz) merged 2 commits intoOct 23, 2026
Merged
Conversation
The legacy samples are not built by CI and only receive Dependabot security bumps. Docs links to them now point at the last commit that contains the folder, so they keep working. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Cover every npm project with one glob entry, group version and security updates, update lockfiles only, run weekly with a cooldown, and skip major and react-native-windows updates. Drop the npm and NuGet /samples/ entries that matched no manifest. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Vladimir Morozov (vmoroz)
enabled auto-merge (squash)
October 23, 2026 01:04
Julio César Rocha (JunielKatarn)
approved these changes
Oct 23, 2026
Vladimir Morozov (vmoroz)
deleted the
users/vmoroz/remove-samples-old-dependabot
branch
October 23, 2026 04:03
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Why
This repo has 85 open Dependabot PRs, each bumping one package in one project. About 30 of them are for the legacy
samples-oldfolder, which CI doesn't build. The Dependabot config groups no npm updates, and two of its three npm and NuGet entries point at/samples/, which has no manifest.This follows the approach used in microsoft/react-native-winrt#303 and microsoft/react-native-winrt#312.
What
Remove
samples-olddocsand the versioned website docs now point at the last commit that has them, so they keep working.Dependabot configuration
**/*glob covers every project folder, so adding or removing a sample needs no config change.react-native-windows, because samples move to new versions through the CI Upgrade workflow.Testing
The new
dependabot.ymlpasses schema validation, and the website spellcheck passes on the changed docs.Screenshots
N/A
Microsoft Reviewers: Open in CodeFlow