From 7d03ffeaee24c0c5c184ce5a9d509f929b6dc76b Mon Sep 17 00:00:00 2001
From: JerrettDavis <mxjerrett@gmail.com>
Date: Thu, 16 Apr 2026 17:54:39 -0500
Subject: [PATCH] ci: group dependabot minor/patch updates per ecosystem

Consolidates routine minor/patch bumps into a single weekly PR per
ecosystem (docker, github-actions, pip), cutting review overhead
roughly in half. Major updates remain ungrouped so breaking changes
still get individual review.

Closes #174

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/dependabot.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a632b3e58..adf834aa1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,6 +7,11 @@ updates:
       interval: weekly
     commit-message:
       prefix: "docker"
+    groups:
+      docker-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
 
   # GitHub Actions version updates
   - package-ecosystem: github-actions
@@ -15,6 +20,11 @@ updates:
       interval: weekly
     commit-message:
       prefix: "ci"
+    groups:
+      actions-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
 
   # Python dependency updates (pip)
   - package-ecosystem: pip
@@ -25,3 +35,8 @@ updates:
       prefix: "deps"
     # Only open PRs for security updates to avoid noise
     open-pull-requests-limit: 5
+    groups:
+      pip-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"