From fe14388956f099a29c2d51d88977e2cd3d234b72 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christian=20Gonz=C3=A1lez=20Di=20Antonio?= Date: Thu, 1 Oct 2026 17:59:03 +0200 Subject: [PATCH] chore(deps): group dependabot updates per ecosystem Dependabot opens one PR per dependency bump, which floods the review queue. Grouping every Go module and GitHub Actions update into a single weekly PR per ecosystem cuts the noise and keeps related bumps (e.g. the several github/codeql-action sub-actions) on the same version. Security updates are unaffected: groups apply only to version updates. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7fbaf5f..0a93834 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,8 +4,16 @@ updates: directory: / schedule: interval: weekly + groups: + gomod: + patterns: + - "*" - package-ecosystem: github-actions directory: / schedule: - interval: weekly \ No newline at end of file + interval: weekly + groups: + github-actions: + patterns: + - "*"