From 4ad909a2168609664df9264eac10928698a583ba Mon Sep 17 00:00:00 2001 From: Shizuo Fujita Date: Fri, 24 Jul 2026 10:06:00 +0900 Subject: [PATCH] ci: enable updates in groups and reduce interval Signed-off-by: Shizuo Fujita --- .github/dependabot.yml | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b18fd293..a6a4ae08 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,4 +3,21 @@ updates: - package-ecosystem: 'github-actions' directory: '/' schedule: - interval: 'weekly' + interval: 'monthly' + groups: + # PR: "Security update [package] from [old] to [new]" + # This PR should be merged in hurry + security-updates: + applies-to: security-updates + patterns: + - '*' + + # PR: "Bump [package] from [old] to [new]" + # No need to be merged this PR in hurry. It is enough to merge + # once in a month. + monthly-updates: + applies-to: version-updates + patterns: + - '*' + # Allow to create PR both of security and normal updates. + open-pull-requests-limit: 1