From 2ce1bd78e24ae45dbb33379946cad20d69062c01 Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 18:33:59 +0200
Subject: [PATCH 1/5] ci: add Dependabot open PR limit configuration

---
 .github/dependabot.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 63a0ed0f..15b47b4d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,6 +10,7 @@ updates:
     directory: '/'
     schedule:
       interval: monthly
+    open-pull-requests-limit: 10
     cooldown:
       default-days: 7
     groups:
@@ -21,9 +22,11 @@ updates:
     directory: '/'
     schedule:
       interval: monthly
+    open-pull-requests-limit: 10
     cooldown:
       default-days: 7
     groups:
       github-actions:
         patterns:
           - '*'
+

From 4bffac94efaaba17a5e71965f88813edf6114d7d Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 18:45:05 +0200
Subject: [PATCH 2/5] ci: simplify Dependabot auto-merge condition to exclude
 major

---
 .github/dependabot.yml    | 2 --
 .github/workflows/ci.yaml | 8 +-------
 2 files changed, 1 insertion(+), 9 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 15b47b4d..27dfa8b7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,7 +10,6 @@ updates:
     directory: '/'
     schedule:
       interval: monthly
-    open-pull-requests-limit: 10
     cooldown:
       default-days: 7
     groups:
@@ -22,7 +21,6 @@ updates:
     directory: '/'
     schedule:
       interval: monthly
-    open-pull-requests-limit: 10
     cooldown:
       default-days: 7
     groups:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 77057e1b..d87ae94b 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -61,13 +61,7 @@ jobs:
           github-token: '${{ secrets.GITHUB_TOKEN }}'
 
       - name: Enable auto-merge for Dependabot PRs
-        if: >-
-          steps.metadata.outputs.update-type ==
-            'version-update:semver-patch' ||
-          steps.metadata.outputs.update-type ==
-            'version-update:semver-minor' ||
-          steps.metadata.outputs.update-type ==
-            'null'
+        if: steps.metadata.outputs.update-type != 'version-update:semver-major'
         run: gh pr merge --auto --squash "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}

From f49c0c0a525fe2396df34a55b473e6c4105d9986 Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 19:00:54 +0200
Subject: [PATCH 3/5] ci: configure multi-ecosystem-groups for single
 consolidated PR per repo

---
 .github/dependabot.yml | 33 +++++++++++++++++----------------
 1 file changed, 17 insertions(+), 16 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 27dfa8b7..3d2efa48 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,26 +5,27 @@
 # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
 
 version: 2
-updates:
-  - package-ecosystem: npm
-    directory: '/'
+
+multi-ecosystem-groups:
+  dependencies:
     schedule:
-      interval: monthly
+      interval: "monthly"
+
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    patterns:
+      - "*"
+    multi-ecosystem-group: "dependencies"
     cooldown:
       default-days: 7
-    groups:
-      npm-dependencies:
-        patterns:
-          - '*'
 
-  - package-ecosystem: github-actions
-    directory: '/'
-    schedule:
-      interval: monthly
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    patterns:
+      - "*"
+    multi-ecosystem-group: "dependencies"
     cooldown:
       default-days: 7
-    groups:
-      github-actions:
-        patterns:
-          - '*'
+
 

From 212f1150567d337a47cf040b656b4b5501b2e3a5 Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 19:06:48 +0200
Subject: [PATCH 4/5] refactor: remove trailing whitespace in dependabot
 configuration

Signed-off-by: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
---
 .github/dependabot.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3d2efa48..f133720e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -27,5 +27,3 @@ updates:
     multi-ecosystem-group: "dependencies"
     cooldown:
       default-days: 7
-
-

From 4e986e2d6587459f1cb890f77e488a79e5f89560 Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 19:11:51 +0200
Subject: [PATCH 5/5] style: format dependabot.yml with prettier

---
 .github/dependabot.yml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f133720e..231611f2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,21 +9,21 @@ version: 2
 multi-ecosystem-groups:
   dependencies:
     schedule:
-      interval: "monthly"
+      interval: 'monthly'
 
 updates:
-  - package-ecosystem: "npm"
-    directory: "/"
+  - package-ecosystem: 'npm'
+    directory: '/'
     patterns:
-      - "*"
-    multi-ecosystem-group: "dependencies"
+      - '*'
+    multi-ecosystem-group: 'dependencies'
     cooldown:
       default-days: 7
 
-  - package-ecosystem: "github-actions"
-    directory: "/"
+  - package-ecosystem: 'github-actions'
+    directory: '/'
     patterns:
-      - "*"
-    multi-ecosystem-group: "dependencies"
+      - '*'
+    multi-ecosystem-group: 'dependencies'
     cooldown:
       default-days: 7