From 882c097b75ad7adc28e086cf24dbe095df3f74fd Mon Sep 17 00:00:00 2001
From: Chuan-kai Lin <cklin@github.com>
Date: Fri, 25 Sep 2026 07:03:13 -0700
Subject: [PATCH] Group CodeQL action Dependabot updates

Keep the CodeQL init, analyze, and upload actions on the same
revision by updating them in a single Dependabot pull request.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d19fbf17-0afc-45a8-84e4-e9e52ac9f73e
---
 .github/dependabot.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f2df9d9c2eb..f47f3ad7540 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -41,6 +41,10 @@ updates:
       day: "thursday" # Thursday is arbitrary
     labels:
       - "Update dependencies"
+    groups:
+      codeql-action:
+        patterns:
+          - "github/codeql-action/*"
   - package-ecosystem: docker
     directory: "extensions/ql-vscode/test/e2e/docker"
     cooldown: