From 0476a27dd44b90feb3391177e996b0c76d98ed81 Mon Sep 17 00:00:00 2001 From: Philip Thong Date: Sun, 18 Oct 2026 07:53:47 -0500 Subject: [PATCH 1/2] Grouped codeql updates --- .github/dependabot.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ef76fd3..ed7db40 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,3 +10,8 @@ updates: directory: "/" # Location of package manifests schedule: interval: "weekly" + groups: + # Group codeql actions + codeql: + patterns: + - "github/codeql-action*" From fdf95fc3c65ec03dcdd4499b204966eecec364a3 Mon Sep 17 00:00:00 2001 From: Philip Thong Date: Sun, 18 Oct 2026 08:00:04 -0500 Subject: [PATCH 2/2] Added actions:write to auto approve dependabot --- .github/workflows/auto_dependabot.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/auto_dependabot.yml b/.github/workflows/auto_dependabot.yml index e87634b..8950bd9 100644 --- a/.github/workflows/auto_dependabot.yml +++ b/.github/workflows/auto_dependabot.yml @@ -6,6 +6,7 @@ on: permissions: pull-requests: write contents: write + actions: write jobs: auto_approve_merge: