From 26a1478f7b5057e2a785c581dca57cb515a1d8d4 Mon Sep 17 00:00:00 2001 From: Renn F Date: Sun, 25 Oct 2026 18:25:50 +0100 Subject: [PATCH 1/2] ci(dependabot): group action updates into one weekly PR Multi-step actions such as github/codeql-action appear in several workflows, and one Dependabot PR per step leaves the steps of a single workflow on different versions, which fails the CodeQL version-mismatch check and keeps the whole weekly wave red. With the group, all action bumps arrive as one PR per week with every reference updated together. --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 62e04036..636cef1d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,10 @@ updates: day: "monday" time: "02:00" timezone: "UTC" + groups: + actions: + patterns: + - "*" - package-ecosystem: "pip" directory: "/" From de05c32d133a282d975c7f07e1bc41b3a50cbed1 Mon Sep 17 00:00:00 2001 From: Renn F Date: Sun, 25 Oct 2026 19:39:41 +0100 Subject: [PATCH 2/2] chore(ci): refresh pull request event payload for housekeeping checks