From 057f5479109f8c52c907c09cc46a064020360cf8 Mon Sep 17 00:00:00 2001
From: Filipe Azevedo <filipe@azevedo.io>
Date: Mon, 12 Oct 2026 11:59:18 +0100
Subject: [PATCH] ci: Group Dependabot updates and track GitHub Actions and the
 Rust toolchain

---
 .github/dependabot.yml | 43 +++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 42 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 977a3b8fc50..fd3ff8d0bb1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -2,10 +2,19 @@ version: 2
 updates:
 
 - package-ecosystem: npm
-  directory: tests/integration-tests
+  # The pnpm workspace root; the integration test packages are its members.
+  directory: "/"
   schedule:
     interval: weekly
+  # Commit messages become `build(deps): ...`, a Conventional Commits title.
+  commit-message:
+    prefix: build
+    include: scope
   open-pull-requests-limit: 10
+  groups:
+    graph-tooling:
+      patterns:
+        - "*"
   allow:
     # We always want to test against the latest Graph CLI tooling: `graph-cli`,
     # `graph-ts`.
@@ -16,7 +25,19 @@ updates:
   directory: "/"
   schedule:
     interval: weekly
+  commit-message:
+    prefix: build
+    include: scope
   open-pull-requests-limit: 10
+  # One PR for all crate updates. wasmtime keeps its own PR: it ships a major
+  # version monthly and some need code changes in runtime/, which would hold
+  # the rest back.
+  groups:
+    dependencies:
+      patterns:
+        - "*"
+      exclude-patterns:
+        - "wasmtime*"
   ignore:
   - dependency-name: hyper
     versions:
@@ -124,3 +145,23 @@ updates:
   - dependency-name: jsonrpc-core
     versions:
     - 17.0.0
+
+- package-ecosystem: github-actions
+  directory: "/"
+  schedule:
+    interval: weekly
+  commit-message:
+    prefix: build
+    include: scope
+  groups:
+    actions:
+      patterns:
+        - "*"
+
+- package-ecosystem: rust-toolchain
+  directory: "/"
+  schedule:
+    interval: weekly
+  commit-message:
+    prefix: build
+    include: scope