Skip to content

Group GitHub CodeQL action updates in Dependabot - #404

Merged
hbc (bcho) merged 3 commits into
mainfrom
copilot/dependabot-group-github-codeql-actions
Oct 22, 2026
Merged

hbc (bcho) merged 3 commits into
mainfrom
copilot/dependabot-group-github-codeql-actions

Conversation

Copilot AI commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Group github/codeql-action updates into a single Dependabot pull request.

Validation

Not applicable.

Changelog

  • I added a user/operator-facing entry under Unreleased in CHANGELOG.md, or this change does not require a changelog entry.

Co-authored-by: bcho <1975118+bcho@users.noreply.github.com>
Copilot AI changed the title [WIP] Group GitHub CodeQL actions changes into one PR Group GitHub CodeQL action updates in Dependabot Oct 22, 2026
Copilot AI requested a review from hbc (bcho) October 22, 2026 21:22
@bcho
hbc (bcho) marked this pull request as ready for review October 22, 2026 21:32
Copilot AI balanced review requested due to automatic review settings October 22, 2026 21:32

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The exact dependency pattern does not match CodeQL sub-action names, so it will not group their updates.

1 open issue
What changed in this PR

This PR aims to consolidate CodeQL action updates into one Dependabot pull request, addressing #402.

Changes:

  • Adds a codeql dependency group to the existing GitHub Actions update configuration.
File Description
.github/​dependabot.yml Adds a grouping pattern for CodeQL action updates.

Review effort: Balanced

Comment thread .github/dependabot.yml Resolved
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Copilot AI balanced review requested due to automatic review settings October 22, 2026 21:42

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The narrowly scoped configuration change matches the requested grouping behavior, with no unresolved findings.

No open issues 🎉

1 resolved since last review

Review effort: Balanced

@bcho
hbc (bcho) merged commit 7e1d58f into main Oct 22, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

dependabot: group github codeql actions changes to one pr

4 participants