From b7a2687938d1b9715f55574a86e2778ee2ab75de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christian=20Mei=C3=9Fner?=
 <35730763+c8m6@users.noreply.github.com>
Date: Wed, 14 Oct 2026 21:58:53 +0200
Subject: [PATCH] chore: tune Dependabot update schedules and grouping

---
 .github/dependabot.yml | 54 +++++++++++++++++++++++++++++++++++-------
 1 file changed, 45 insertions(+), 9 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8c6cda6..77a41a3 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,14 +1,50 @@
+# Scheduled version updates. Security updates are managed separately by GitHub.
 version: 2
 updates:
-  - package-ecosystem: bundler
-    directory: /
+  - package-ecosystem: "bundler"
+    directory: "/"
     schedule:
-      interval: weekly
-  - package-ecosystem: docker
-    directory: /
+      interval: "weekly"
+      day: "wednesday"
+      time: "07:00"
+      timezone: "Europe/Berlin"
+    open-pull-requests-limit: 3
+    groups:
+      routine-updates:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+  - package-ecosystem: "docker"
+    directory: "/"
     schedule:
-      interval: weekly
-  - package-ecosystem: github-actions
-    directory: /
+      interval: "weekly"
+      day: "wednesday"
+      time: "07:20"
+      timezone: "Europe/Berlin"
+    open-pull-requests-limit: 3
+    groups:
+      routine-updates:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
-      interval: weekly
+      interval: "monthly"
+      time: "08:00"
+      timezone: "Europe/Berlin"
+    open-pull-requests-limit: 3
+    groups:
+      routine-updates:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch