ALTERNATIVE using dependabot.
I recently faced the same issue (or, i was fed up to face it for each angular update) so I made a bit of googling and found about dependabot groups.
I was already using dependabot to manage my dependencies, but it was still annoying to update Angular one PR at a time, with the npm checks not happy about the npm install failing until all angular dependencies were up-to-date (which resulted in creating a separate branch, executing the npm command of the actual top voted answer of this post (very useful !) and merging that branch instead).
I also had the issue when updating Microsoft.whatever following .NET versioning. I ended up with 10+ commits each updating only a single line in the app. Which is IMO "destroying" the git history as to find a certain commit (eg. debugging purposes) it would be kind of difficult to find the right one in the middle of lots of 1-line commits (and dependabot would look like a better contributor than me on my own project :D)
I updated my file as the following to group the dependencies updates :
version: 2
updates:
- package-ecosystem: "npm"
directory: "ClientApp/"
schedule:
interval: "monthly"
open-pull-requests-limit: 10
groups:
angular:
patterns:
- "@angular*"
fontawesome:
patterns:
- "@fortawesome*"
See the documentation for other dependabot configs
NB : I still have to improve the file as it does not make any differences between patch, minor and major updates. But it solves this issue at the moment