From 3ff985b40adaf050e7f579807c0355a8538294d2 Mon Sep 17 00:00:00 2001
From: Dan Guido <dan@trailofbits.com>
Date: Thu, 12 Feb 2026 21:51:04 -0500
Subject: [PATCH] Add grouped updates and PR limits to dependabot config

Configure grouped updates for minor/patch versions in both cargo
and github-actions ecosystems. Add explicit open-pull-requests-limit.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/dependabot.yml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2691ae9..cdaa7eb 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,8 +5,20 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 10
+    groups:
+      cargo-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
   # GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
\ No newline at end of file
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    groups:
+      actions-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"