Renovate

.github/dependabot.yml

@@ -8,6 +8,20 @@ updates:
       interval: "weekly"
       day: "monday"
       time: "09:00"
+    # wait 7 days for stability      
+    cooldown:
+      default-days: 7
+
+    # grouping: bundle updates into one PR rather than one at a time
+    groups:
+      java-dependencies:
+        patterns:
+          - "*" 
+        # Optional: exclude major versions so we can review these
+        # update-types:
+        #   - "minor"
+        #   - "patch"
+
     open-pull-requests-limit: 5
     labels:
       - "dependencies"

renovate.json

@@ -9,7 +9,9 @@
     {
       "description": "Pin all GitHub Actions to SHA digests",
       "matchManagers": ["github-actions"],
-      "pinDigests": true
+      "pinDigests": true,
+      "minimumReleaseAge": "7 days",
+      "groupName": "Renovatebot GHA Updates"
     }
   ]
 }