Tame Dependabot: Group your updates, slow the cadence, keep security fast
7/29/2026
This post introduces and explains how to configure Dependabot to group dependency updates into single pull requests, slow down the update cadence to monthly, and ensure all relevant package ecosystems are covered. It details the use of the `groups` block with wildcard patterns, the `schedule.interval` setting, and adding multiple `package-ecosystem` entries. It also explains the new automatic package cooldown feature and how it complements grouping and slower cadences for improved safety and reduced noise. The post provides practical steps for applying these configurations.