(iceberg-cpp) branch main updated: Infra: Group github/codeql-action bumps into a single dependabot PR (#826)

[ga...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

wgtmac pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-cpp.git


The following commit(s) were added to refs/heads/main by this push:
     new ebc0e07c Infra: Group github/codeql-action bumps into a single dependabot PR (#826)
ebc0e07c is described below

commit ebc0e07c98b1771cbe46879507163c0d3cd40256
Author: Yuya Ebihara <eb...@gmail.com>
AuthorDate: Sat Jul 11 11:24:26 2026 +0900

    Infra: Group github/codeql-action bumps into a single dependabot PR (#826)
    
    Thus, dependabot can update these two jobs in a single PR:
    
    
    https://github.com/apache/iceberg-cpp/blob/f4f6359fa9a95bde4bb2627bd8a5d45273644294/.github/workflows/codeql.yml#L56-L62
    
    - https://github.com/apache/infrastructure-actions/pull/1028
---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index fc74cd29..325ea242 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -26,3 +26,10 @@ updates:
       day: "sunday"
     cooldown:
       default-days: 7
+    groups:
+      # The codeql-action init/autobuild/analyze steps must all run the
+      # same version - split PRs cause a version mismatch that fails the
+      # Analyze jobs. Group them so a single PR bumps all of them together.
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"