From 253038c5d7f478bb45d98e5f33bea8c29dbecc01 Mon Sep 17 00:00:00 2001
From: Jean-Philippe Evrard <open-source@a.spamming.party>
Date: Tue, 28 Jul 2026 11:13:12 +0200
Subject: [PATCH] Bump codeql together

Without this, multiple codeql actions are bumped separately,
and there is a risk of failure like in [0][1][2].

[0]: https://github.com/kubereboot/kured/pull/1381
[1]: https://github.com/kubereboot/kured/pull/1384
[2]: https://github.com/kubereboot/kured/pull/1386

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
---
 .github/dependabot.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 5673349..792b8ae 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -5,6 +5,10 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    groups:
+      codeql:
+        patterns:
+          - "github/codeql-action/*"
   # Maintain dependencies for gomod
   - package-ecosystem: "gomod"
     directory: "/"