From 204d7c745e9a93425ecfe155edfcc82a9eaf59fc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christian=20Gonz=C3=A1lez=20Di=20Antonio?= Date: Thu, 1 Oct 2026 17:58:57 +0200 Subject: [PATCH] chore(deps): group dependabot updates per ecosystem Dependabot opens one PR per dependency bump, which floods the review queue. Grouping every Go module and GitHub Actions update into a single weekly PR per ecosystem cuts the noise and keeps related bumps (e.g. the several github/codeql-action sub-actions) on the same version. Security updates are unaffected: groups apply only to version updates. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5e562fb..92035ad 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,8 +9,16 @@ updates: directory: "/" # Location of package manifests schedule: interval: "weekly" + groups: + gomod: + patterns: + - "*" - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" + groups: + github-actions: + patterns: + - "*"