From e2f33941bad1e688f4e9f6a14128b51a83d36cd8 Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 18:33:16 +0200
Subject: [PATCH 1/4] ci: configure Dependabot 7-day cooldown and PR limits

---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9e4920bc3..f989a5e3f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,6 +9,9 @@ updates:
     directory: "/" # Location of package manifests
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 10
+    cooldown:
+      default-days: 7
     groups:
       npm-dependencies:
         patterns:
@@ -18,7 +21,11 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 10
+    cooldown:
+      default-days: 7
     groups:
       github-actions:
         patterns:
           - '*'
+

From e7f307d900b909bb528b28ab5142e9c56c4b5939 Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 18:42:46 +0200
Subject: [PATCH 2/4] ci: remove redundant open-pull-requests-limit

---
 .github/dependabot.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f989a5e3f..4caa80e36 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,7 +9,6 @@ updates:
     directory: "/" # Location of package manifests
     schedule:
       interval: "weekly"
-    open-pull-requests-limit: 10
     cooldown:
       default-days: 7
     groups:
@@ -21,7 +20,6 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-    open-pull-requests-limit: 10
     cooldown:
       default-days: 7
     groups:

From 1202180d8c172bf3ccf79e7b139aae4563667e5c Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 18:59:41 +0200
Subject: [PATCH 3/4] ci: configure multi-ecosystem-groups and invert major
 check in auto-merge

---
 .github/dependabot.yml     | 27 ++++++++++++++-------------
 .github/workflows/lint.yml |  2 +-
 2 files changed, 15 insertions(+), 14 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4caa80e36..2615cedfa 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,26 +4,27 @@
 # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
 
 version: 2
-updates:
-  - package-ecosystem: "npm" # See documentation for possible values
-    directory: "/" # Location of package manifests
+
+multi-ecosystem-groups:
+  dependencies:
     schedule:
       interval: "weekly"
+
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    patterns:
+      - "*"
+    multi-ecosystem-group: "dependencies"
     cooldown:
       default-days: 7
-    groups:
-      npm-dependencies:
-        patterns:
-          - '*'
 
   - package-ecosystem: "github-actions"
     directory: "/"
-    schedule:
-      interval: "weekly"
+    patterns:
+      - "*"
+    multi-ecosystem-group: "dependencies"
     cooldown:
       default-days: 7
-    groups:
-      github-actions:
-        patterns:
-          - '*'
+
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index c3ec30fbc..c6f7e822d 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -95,7 +95,7 @@ jobs:
         uses: dependabot/fetch-metadata@v3
 
       - name: Enable auto-merge for Dependabot PRs
-        if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor'
+        if: steps.metadata.outputs.update-type != 'version-update:semver-major'
         run: gh pr merge --admin --squash "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}

From 4c1eb0411eaafa17b94be50b74108e18f244efd1 Mon Sep 17 00:00:00 2001
From: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
Date: Sat, 3 Oct 2026 19:04:10 +0200
Subject: [PATCH 4/4] chore: update dependabot schedule interval to monthly

Signed-off-by: Max Ostapenko <1611259+max-ostapenko@users.noreply.github.com>
---
 .github/dependabot.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2615cedfa..a7bc39255 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,7 +8,7 @@ version: 2
 multi-ecosystem-groups:
   dependencies:
     schedule:
-      interval: "weekly"
+      interval: "monthly"
 
 updates:
   - package-ecosystem: "npm"
@@ -26,5 +26,3 @@ updates:
     multi-ecosystem-group: "dependencies"
     cooldown:
       default-days: 7
-
-