From 3b59200b50e8e35dd1f63caed80a4ab2c43f5b6a Mon Sep 17 00:00:00 2001
From: David Sharnoff <github@dave.sharnoff.org>
Date: Fri, 28 Aug 2026 12:45:55 -0700
Subject: [PATCH] Group CodeQL action updates in Dependabot

---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a07e9ab..4ce9717 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,3 +14,9 @@ updates:
     directory: /
     schedule:
       interval: daily
+    groups:
+      # The init/autobuild/analyze steps must stay on the same version, so they
+      # have to be bumped in a single pull request.
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"