From 3be5975820f9216d90a7989db2f2b8857bbbdf70 Mon Sep 17 00:00:00 2001
From: Scott Hardy <scott.the.hardy@gmail.com>
Date: Mon, 3 Aug 2026 09:41:36 -0600
Subject: [PATCH] Group Dependabot updates and track manifest versions

Split each ecosystem into two groups (minor-and-patch, major) so routine
bumps arrive as a single PR while majors stay isolated for review, and add
versioning-strategy: "increase" where the ecosystem supports it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .github/dependabot.yaml | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index ee0bdc4..0581b70 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -1,20 +1,57 @@
 version: 2
 updates:
   - package-ecosystem: "npm"
+    versioning-strategy: "increase"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "monday"
       time: "10:00"
+    groups:
+      minor-and-patch:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      major:
+        patterns:
+          - "*"
+        update-types:
+          - "major"
   - package-ecosystem: "docker"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "monday"
       time: "10:00"
+    groups:
+      minor-and-patch:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      major:
+        patterns:
+          - "*"
+        update-types:
+          - "major"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "monday"
       time: "10:00"
+    groups:
+      minor-and-patch:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      major:
+        patterns:
+          - "*"
+        update-types:
+          - "major"