Skip to content

Instantly share code, notes, and snippets.

@derektamsen
Created July 26, 2026 04:13
Show Gist options
  • Select an option

  • Save derektamsen/6c81a79164ad61e5f3bb01e745d1d955 to your computer and use it in GitHub Desktop.

Select an option

Save derektamsen/6c81a79164ad61e5f3bb01e745d1d955 to your computer and use it in GitHub Desktop.
Group Codeql Dependabot Update PRs
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
cooldown:
default-days: 7
groups:
# Codeql typically has three actions that need to run. These actions all need to be the same version.
# If each version is updated independantly codeql will fail CI. The below config will group all of the
# codeql updates into a single pr making it possible for CI to pass.
codeql-action:
patterns:
- "github/codeql-action/*"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment