Look at using custom GitHub dependabot.yaml

[GrahamDumpleton]

Is your feature request related to a problem? Please describe.

Dealing manually with all the influx of dependabot alerts because of AI usage can be annoying. Look at configuring things so certain classes of updates are merged together as aggregated PR instead of separate ones. Possibly automate some updates.

Describe the solution you'd like

See:

• https://docs.github.com/en/code-security/concepts/supply-chain-security/about-the-dependabot-yml-file

Describe alternatives you've considered

No response

Additional information

No response