From 27bc5cb4fd32aa60997ba1bf5917313619ec9530 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Montgomery=20Edwards=E2=81=B4=E2=81=B4=E2=81=B8?=
 <57072051+x448@users.noreply.github.com>
Date: Sun, 5 Jul 2026 16:59:51 -0500
Subject: [PATCH] Add codeql group to dependabot.yml

Copied from fxamacker/cbor to fix dependabot errors
when more than one action in codeql workflow needs
version bump.
---
 .github/dependabot.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index cdf65dd..d6217c7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,7 +5,11 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-      
+    groups:
+      codeql:
+        patterns:
+          - "github/codeql-action*"
+
   - package-ecosystem: "gomod"
     directory: "/"
     schedule: