From 51d12399747e5888660178f71594ee069a27305a Mon Sep 17 00:00:00 2001
From: Corie Watson <watson.corie@gmail.com>
Date: Mon, 1 Jun 2026 10:28:53 +0100
Subject: [PATCH] chore(dependabot): group security & supply chain attack
 hardening (#2850)

* chore(deps): group security

* chore(deps): rename dependency group for minor and patch updates

* chore(deps): rename security updates group in dependabot configuration

* chore(deps): add cooldown settings for Dependabot updates
---
 .github/dependabot.yml | 29 +++++++++++++++++++++++++----
 1 file changed, 25 insertions(+), 4 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2d837857ca..f89ebe3f4e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,23 +1,44 @@
 version: 2
+
 updates:
   - package-ecosystem: "npm"
     directories:
       - "/**"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 7
+      semver-major-days: 7
+      semver-minor-days: 7
+      semver-patch-days: 7
+
     labels:
       - "dependencies"
       - "automated"
+
     commit-message:
       prefix: "chore"
       include: "scope"
+
     groups:
-      minor-and-patch:
+      version-minor-and-patch:
+        applies-to: version-updates
         patterns:
           - "*"
         update-types:
-          - "minor"
-          - "patch"
+          - minor
+          - patch
+
+      security-updates:
+        applies-to: security-updates
+        patterns:
+          - "*"
+        update-types:
+          - major
+          - minor
+          - patch
+
     ignore:
       - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
+        update-types:
+          - "version-update:semver-major"