From e330e240dd05ba1d1d23636f236c0310b77c47e1 Mon Sep 17 00:00:00 2001
From: "seahaven-openswe[bot]"
 <296972425+seahaven-openswe[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 19:33:08 -0400
Subject: [PATCH] fix(ci): group vitest and @vitest/* updates in dependabot
 (#21)

vitest and @vitest/coverage-v8 share a strict peer dependency. Bumping them
in separate Dependabot PRs breaks npm ci. Grouping them ensures they stay
in lockstep.

Co-authored-by: adam <166072409+amoussa1229@users.noreply.github.com>
---
 .github/dependabot.yml | 38 +++++++++++++++++++++++---------------
 1 file changed, 23 insertions(+), 15 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2cccfa1..ca76eb5 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,29 +1,37 @@
 version: 2
 updates:
-  - package-ecosystem: "npm"
-    directory: "/"
+  - package-ecosystem: 'npm'
+    directory: '/'
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
     groups:
       minor-and-patch:
         update-types:
-          - "minor"
-          - "patch"
-  - package-ecosystem: "npm"
-    directory: "/infra"
+          - 'minor'
+          - 'patch'
+      vitest:
+        patterns:
+          - 'vitest'
+          - '@vitest/*'
+  - package-ecosystem: 'npm'
+    directory: '/infra'
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
     groups:
       minor-and-patch:
         update-types:
-          - "minor"
-          - "patch"
-  - package-ecosystem: "github-actions"
-    directory: "/"
+          - 'minor'
+          - 'patch'
+      vitest:
+        patterns:
+          - 'vitest'
+          - '@vitest/*'
+  - package-ecosystem: 'github-actions'
+    directory: '/'
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
     groups:
       minor-and-patch:
         update-types:
-          - "minor"
-          - "patch"
+          - 'minor'
+          - 'patch'