diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a07e9ab..4ce9717 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,3 +14,9 @@ updates:
     directory: /
     schedule:
       interval: daily
+    groups:
+      # The init/autobuild/analyze steps must stay on the same version, so they
+      # have to be bumped in a single pull request.
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"