From df09b2b0eea25604f23379ea18c9849baf30d4c6 Mon Sep 17 00:00:00 2001
From: Tim Jenness <tjenness@lsst.org>
Date: Mon, 21 Sep 2026 09:53:32 -0700
Subject: [PATCH] Use monthly dependabot batches for actions

---
 .github/dependabot.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5ace4600..f82a69c7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,14 @@
 version: 2
 updates:
+  # Each ecosystem batches all its version updates into a single pull request.
+  # Security updates are not grouped and still open immediately.
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "monthly"
+    cooldown:
+      default-days: 7
+    groups:
+      monthly-batch:
+        patterns:
+          - "*"