From 566e4dcf12762420d7e2f0e026a386cb8b65cd46 Mon Sep 17 00:00:00 2001
From: Ian Holloway <72767437+IanHollow@users.noreply.github.com>
Date: Mon, 28 Sep 2026 09:27:54 -0700
Subject: [PATCH] Group nested shared CI updates

Signed-off-by: Ian Holloway <72767437+IanHollow@users.noreply.github.com>
---
 .github/dependabot.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c1b052f..919fcdb 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,7 +6,10 @@ updates:
       interval: weekly
     groups:
       shared-ci:
-        patterns: [nix-forge/ci]
+        patterns: ["nix-forge/ci", "nix-forge/ci/*"]
+        exclude-patterns:
+          - "nix-forge/ci/.github/workflows/slsa-*"
+          - "nix-forge/ci/actions/repository-checks"
         # Shared workflow references are validated as one release commit.
       actions-minor-patch:
         patterns: ['*']