From 12300b53a1c79c1acac6757031ec462d53814665 Mon Sep 17 00:00:00 2001
From: Eduardo Villalpando Mello <eduardovil@microsoft.com>
Date: Tue, 27 Oct 2026 17:05:13 -0700
Subject: [PATCH 1/2] Group Dependabot updates weekly and auto-approve PRs

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: af1480d9-a2b1-4b63-a64e-b59bbd0b8c57
---
 .github/dependabot.yml                        | 64 ++++++++-----------
 .github/workflows/dependabot-auto-approve.yml | 20 ++++++
 2 files changed, 48 insertions(+), 36 deletions(-)
 create mode 100644 .github/workflows/dependabot-auto-approve.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0c90f35a4b52..dff2e98cc250 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,57 +1,49 @@
 version: 2
-updates:
-  - package-ecosystem: 'github-actions'
-    directory: /
-    schedule:
-      interval: daily
-    labels:
-      - 'no-changelog'
-    cooldown:
-      default-days: 7
-
-  - package-ecosystem: 'github-actions'
-    directory: .github/actions/build-vsix
+multi-ecosystem-groups:
+  dependencies:
     schedule:
-      interval: daily
-    labels:
-      - 'no-changelog'
-    cooldown:
-      default-days: 7
+      interval: weekly
+    open-pull-requests-limit: 1
 
+updates:
   - package-ecosystem: 'github-actions'
-    directory: .github/actions/lint
-    schedule:
-      interval: daily
+    directories:
+      - /
+      - /.github/actions/build-vsix
+      - /.github/actions/lint
+      - /.github/actions/smoke-tests
+    patterns: ['*']
+    multi-ecosystem-group: dependencies
     labels:
+      - 'dependencies'
       - 'no-changelog'
     cooldown:
       default-days: 7
 
-  - package-ecosystem: 'github-actions'
-    directory: .github/actions/smoke-test
-    schedule:
-      interval: daily
+  - package-ecosystem: 'npm'
+    directories:
+      - /
+      - /pythonExtensionApi
+    patterns: ['*']
+    multi-ecosystem-group: dependencies
     labels:
+      - 'dependencies'
       - 'no-changelog'
-    cooldown:
-      default-days: 7
+      - 'skip package*.json'
 
   # Not skipping the news for some Python dependencies in case it's actually useful to communicate to users.
   - package-ecosystem: 'pip'
-    directory: /
-    schedule:
-      interval: daily
+    directories:
+      - /
+      - /build
+      - /python_files/jedilsp_requirements
+    patterns: ['*']
+    multi-ecosystem-group: dependencies
     ignore:
       - dependency-name: prospector # Due to Python 2.7 and #14477.
       - dependency-name: pytest # Due to Python 2.7 and #13776.
       - dependency-name: py # Due to Python 2.7.
       - dependency-name: jedi-language-server
     labels:
+      - 'dependencies'
       - 'no-changelog'
-  # Activate when we feel ready to keep up with frequency.
-  # - package-ecosystem: 'npm'
-  #   directory: /
-  #   schedule:
-  #     interval: daily
-  #   default_labels:
-  #     - "no-changelog"
diff --git a/.github/workflows/dependabot-auto-approve.yml b/.github/workflows/dependabot-auto-approve.yml
new file mode 100644
index 000000000000..9104842f46c9
--- /dev/null
+++ b/.github/workflows/dependabot-auto-approve.yml
@@ -0,0 +1,20 @@
+name: Dependabot auto-approve
+
+on:
+  pull_request_target:
+    types: [opened, reopened, synchronize, ready_for_review]
+
+permissions:
+  pull-requests: write
+
+jobs:
+  approve:
+    if: github.event.pull_request.user.login == 'dependabot[bot]' && !github.event.pull_request.draft
+    runs-on: ubuntu-latest
+    steps:
+      - name: Approve Dependabot PR
+        run: gh pr review "$PR_NUMBER" --approve --repo "$GH_REPO"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: ${{ github.repository }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}

From 3c05645164d6d25853dc8b309246f9779e3932f6 Mon Sep 17 00:00:00 2001
From: Eduardo Villalpando Mello <eduardovil@microsoft.com>
Date: Tue, 27 Oct 2026 17:09:21 -0700
Subject: [PATCH 2/2] Run grouped Dependabot updates daily

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: af1480d9-a2b1-4b63-a64e-b59bbd0b8c57
---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index dff2e98cc250..5c5df98c5f2f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -2,7 +2,7 @@ version: 2
 multi-ecosystem-groups:
   dependencies:
     schedule:
-      interval: weekly
+      interval: daily
     open-pull-requests-limit: 1
 
 updates: