From e18b5ca2d5e822f5677d9cb3547ec73e7bf59d28 Mon Sep 17 00:00:00 2001
From: Leonard O'Sullivan <leonard@firstnode.com.au>
Date: Fri, 1 May 2026 14:24:41 +1000
Subject: [PATCH] ci: add dependabot config with monthly grouped updates

One PR per ecosystem per month: github-actions, go (lambda),
go (integration tests), and pip (docs). All deps within each
ecosystem are grouped into a single PR.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .github/dependabot.yml | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..0d63c1d
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,38 @@
+version: 2
+
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+    groups:
+      actions:
+        patterns:
+          - "*"
+
+  - package-ecosystem: gomod
+    directory: /cmd/lambda
+    schedule:
+      interval: monthly
+    groups:
+      go-lambda:
+        patterns:
+          - "*"
+
+  - package-ecosystem: gomod
+    directory: /tests/integration
+    schedule:
+      interval: monthly
+    groups:
+      go-integration:
+        patterns:
+          - "*"
+
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: monthly
+    groups:
+      docs:
+        patterns:
+          - "*"