From aa7e7785bc5624cb7e3edbdfcaa992e5e60b26b4 Mon Sep 17 00:00:00 2001
From: Matt Aitchison <matt.aitchison@crewai.com>
Date: Tue, 3 Feb 2026 08:53:28 -0600
Subject: [PATCH] chore: group dependabot security updates into single PR
 (#4351)

Configure dependabot to batch security updates together while keeping
regular version updates as separate PRs.
---
 .github/dependabot.yml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 624c00413..2a52b9257 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,7 +5,12 @@
 
 version: 2
 updates:
-  - package-ecosystem: uv # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: uv
+    directory: "/"
     schedule:
       interval: "weekly"
+    groups:
+      security-updates:
+        applies-to: security-updates
+        patterns:
+          - "*"