From e00c1f09e5e9feffd13804fd8635b603416d0ac3 Mon Sep 17 00:00:00 2001 From: Stan Ulbrych Date: Fri, 1 May 2026 07:42:47 +0100 Subject: [PATCH 1/3] Add group configuration for actions in dependabot --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b9b7895..7ef3805 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -36,3 +36,7 @@ updates: open-pull-requests-limit: 5 cooldown: default-days: 14 + groups: + actions: + patterns: + - "*" From eb1348c746c071d36222723a3ccf40c5b7e4bc57 Mon Sep 17 00:00:00 2001 From: Stan Ulbrych Date: Fri, 1 May 2026 17:36:51 +0100 Subject: [PATCH 2/3] Move it --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7ef3805..c3ec87d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -34,9 +34,9 @@ updates: schedule: interval: monthly open-pull-requests-limit: 5 - cooldown: - default-days: 14 groups: actions: patterns: - "*" + cooldown: + default-days: 14 From f4697b4c7d36c9726051cdffd9b1f696246c138e Mon Sep 17 00:00:00 2001 From: Stan Ulbrych Date: Fri, 1 May 2026 17:43:07 +0100 Subject: [PATCH 3/3] Add fallback --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c3ec87d..208a537 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -23,6 +23,8 @@ updates: - "tailwindcss" - "@tailwindcss/*" - "postcss" + dependencies: + patterns: ["*"] cooldown: # https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns # Cooldowns protect against supply chain attacks by avoiding the