ci: update dependabot rules (#1059)

This commit is contained in:
Guglielmo Colombo 2026-07-09 10:46:31 +02:00 • committed by GitHub
commit 1af1a087ef
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -5,3 +5,11 @@ updates:
directory: "/"
schedule:
interval: "monthly"
# Group all github/codeql-action/* sub-paths (init, analyze, ...) into a
# single PR so they are always bumped together. Bumping them independently
# leaves the workflow with mismatched versions across steps, which
# github/codeql-action rejects at runtime.
groups:
codeql-action:
patterns:
- "github/codeql-action/*"