From 9decc77f503f9278bf520c6f4e4f82df33cbfd6a Mon Sep 17 00:00:00 2001
From: John Bampton <jbampton@gmail.com>
Date: Tue, 17 Mar 2026 13:57:29 +1000
Subject: [PATCH] [CI] Add github-actions ecosystem to Dependabot

Group updates to reduce repo noise

Setup to run weekly.

Added 7 day cooldown period

https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
---
 .github/dependabot.yml | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 41b307863fc3..cef74aafb4b0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -22,8 +22,19 @@
 
 version: 2
 updates:
-  - package-ecosystem: "maven" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    open-pull-requests-limit: 2
+    schedule:
+      interval: "weekly"
+    groups:
+      github-actions-dependencies:
+        patterns:
+          - "*"
+    cooldown:
+      default-days: 7
+  - package-ecosystem: "maven"
+    directory: "/"
     schedule:
       interval: "daily"
     cooldown: