From a72d565c15ded36ee5b40d61d4c9066d24f0bd39 Mon Sep 17 00:00:00 2001
From: Max Ekman <max@looplab.se>
Date: Wed, 10 Jun 2026 08:12:10 +0200
Subject: [PATCH] ci: group dependabot updates to reduce PR noise
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bundle weekly mix bumps into three groups — phoenix runtime, dev-only
tooling, and remaining runtime deps — and collapse github-actions bumps
into a single group. Patch and minor updates batch together while major
bumps still arrive as standalone PRs so breaking changes get individual
review.
---
 .github/dependabot.yml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2f82f50..d6e47ca 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,8 +4,40 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    groups:
+      phoenix:
+        patterns:
+          - "phoenix*"
+        update-types: ["patch", "minor"]
+      dev-dependencies:
+        patterns:
+          - "ex_doc"
+          - "credo"
+          - "dialyxir"
+          - "bandit"
+          - "bun"
+          - "floki"
+          - "req"
+        update-types: ["patch", "minor"]
+      runtime-dependencies:
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "phoenix*"
+          - "ex_doc"
+          - "credo"
+          - "dialyxir"
+          - "bandit"
+          - "bun"
+          - "floki"
+          - "req"
+        update-types: ["patch", "minor"]
 
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: weekly
+    groups:
+      actions:
+        patterns:
+          - "*"