From 059c367fb91465fd77e749fe8a824dc7fa27ff50 Mon Sep 17 00:00:00 2001
From: Satyam Yadav <114805086+Coding-Professional@users.noreply.github.com>
Date: Mon, 2 Nov 2026 12:44:29 +0530
Subject: [PATCH] ci: group Dependabot minor and patch updates

Combine npm minor and patch updates into one pull request each for
production and development dependencies, and group GitHub Actions
updates. Major npm updates still open separate pull requests.

Skip lucide-react major updates: 1.x removes the Youtube brand icon
used on the landing page, so the upgrade fails to type-check.
---
 .github/dependabot.yml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4a36204..8a8a6f0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,9 +6,34 @@ updates:
       interval: weekly
       day: monday
     open-pull-requests-limit: 5
+    # Minor and patch updates arrive as one pull request per dependency type.
+    # Major updates keep their own pull requests so breaking changes are reviewed
+    # one at a time.
+    groups:
+      production-dependencies:
+        dependency-type: production
+        update-types:
+          - minor
+          - patch
+      development-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+    ignore:
+      # lucide-react 1.x removes brand icons, including the `Youtube` icon used in
+      # src/components/landing/latest-videos.tsx and why-us.tsx. Remove this rule
+      # when those icons are replaced.
+      - dependency-name: lucide-react
+        update-types:
+          - version-update:semver-major
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: weekly
       day: monday
     open-pull-requests-limit: 5
+    groups:
+      github-actions:
+        patterns:
+          - "*"