From a9f6bfdca785c03521366a8cb6399890779f3a9c Mon Sep 17 00:00:00 2001
From: Rohit Solia <rohit.solia@gmail.com>
Date: Mon, 19 Oct 2026 10:40:23 -0500
Subject: [PATCH] ci: group dependabot updates quarterly

---
 .github/dependabot.yml | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 494fcc0..d8c092d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,16 +1,18 @@
 version: 2
+# One pull request a quarter for every ecosystem; security updates still come when needed.
+multi-ecosystem-groups:
+  all:
+    schedule:
+      interval: quarterly
 updates:
   - package-ecosystem: github-actions
     directory: /
-    schedule:
-      interval: monthly
+    patterns: ["*"]
+    multi-ecosystem-group: all
   - package-ecosystem: npm
     directory: /
-    schedule:
-      interval: monthly
-    groups:
-      dev:
-        dependency-type: development
+    patterns: ["*"]
+    multi-ecosystem-group: all
     ignore:
       # The types follow the lowest Node in engines, not the newest.
       - dependency-name: "@types/node"