Configure Dependabot to group all updates into one PR per ecosystem

[Copilot]

Dependabot was opening individual PRs per dependency, creating noise. This caps it to one open PR per ecosystem and batches all updates into a single grouped PR.

Changes

• npm: added open-pull-requests-limit: 1 and groups.all-dependencies matching "*" — all npm updates land in one PR daily
• github-actions: same pattern with groups.all-actions — all Actions updates land in one PR weekly
• Existing schedule.interval and directory: "/" values unchanged

groups:
  all-dependencies:
    patterns:
      - "*"

Original prompt

Update .github/dependabot.yml to group dependency updates into a single pull request per package ecosystem (npm and github-actions).

Goal:

• Configure Dependabot so it opens at most one open pull request per ecosystem and groups all updates within that ecosystem into a single PR.
• Keep existing schedule intervals (daily for npm, weekly for GitHub Actions) and directory "/".

Change to make (replace the file .github/dependabot.yml with the content below):

version: 2
updates:

Enable version updates for npm

• package-ecosystem: "npm"

  Look for package.json and lock files in the root directory

  directory: "/"

  Check the npm registry for updates every day (weekdays)

  schedule:
  interval: "daily"

  Limit open PRs for this ecosystem to 1 and group all updates into one PR

  open-pull-requests-limit: 1
  groups:
  all-dependencies:
  patterns:
  - "*"

Enable version updates for GitHub Actions

• package-ecosystem: "github-actions"

  Workflow files stored in the default location of .github/workflows

  You don't need to specify /.github/workflows for directory. You can use directory: "/".

  directory: "/"
  schedule:
  interval: "weekly"
  open-pull-requests-limit: 1
  groups:
  all-actions:
  patterns:
  - "*"

This pull request was created from Copilot chat.

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
stormcomui	Ready	Preview, Comment	Feb 22, 2026 8:47pm

[Copilot]

Pull request overview

This PR configures Dependabot to batch all dependency updates into a single pull request per package ecosystem, reducing noise from individual PRs. The configuration adds grouping rules for both npm and GitHub Actions ecosystems while preserving existing update schedules (daily for npm, weekly for GitHub Actions).

Changes:

• Added open-pull-requests-limit: 1 to cap open PRs per ecosystem
• Configured groups with wildcard pattern "*" to batch all updates together
• Removed outdated header comments for cleaner configuration