From 645161cc09a1b5a79b6567d1fb329bafc9e300dc Mon Sep 17 00:00:00 2001
From: Ravi Khadiwala <ravi@signal.org>
Date: Mon, 26 Jan 2026 10:04:28 -0600
Subject: [PATCH] add dependabot.yml

---
 .github/dependabot.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..a1c6155bb
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,20 @@
+version: 2
+updates:
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: monthly
+  groups:
+    minor-actions-dependencies:
+      # GitHub Actions: Only group minor and patch updates (we want to carefully review major updates)
+      update-types: [ minor, patch ]
+
+- package-ecosystem: maven
+  directory: /
+  schedule:
+    interval: monthly
+  groups:
+    minor-java-dependencies:
+      # Java: Only group minor and patch updates (we want to carefully review major updates)
+      update-types: [ minor, patch ]
+