From 4302703a2a1735096293934e2449a8f74e3e1083 Mon Sep 17 00:00:00 2001
From: EquityBot <333319867+EquityBot@users.noreply.github.com>
Date: Sun, 1 Nov 2026 19:51:15 +1100
Subject: [PATCH] ci(dependabot): group github/codeql-action updates

Dependabot opened init, analyze and upload-sarif as separate PRs, and CodeQL fails a workflow whose steps use different versions. One group puts them in one PR.
---
 .github/dependabot.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d118fb2..2c480d2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,6 +6,11 @@ updates:
       interval: weekly
     cooldown:
       default-days: 7
+    groups:
+      # CodeQL refuses a workflow whose init, analyze and upload-sarif steps differ in version.
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"
     ignore:
       # Policy pins move by hand to a reviewed release-policy commit.
       - dependency-name: "ryanduguid/release-policy/.github/workflows/*"