mirror of
https://github.com/keycloak/keycloak.git
synced 2025-12-30 11:29:57 -06:00
This PR uses dependabot.yml groups key to controls version updates. It tells Dependabot to bundle regular package upgrades (e.g., npm or github-actions) into a single pull request based on your rules. Additional step: Enable in the repository settings grouped updates: This setting controls security updates. Enabling this tells Dependabot to bundle all available security patches (i.e., updates that fix vulnerabilities) into a single pull request, separate from our version updates. See: https://github.blog/changelog/2024-03-28-dependabot-grouped-security-updates-generally-available/ Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>