In a dependabot.yml configuration for GitHub Actions, which key groups multiple action updates into a single PR?
Select an answer to reveal the explanation.
Short Explanation and Infographic
The 'groups:' key in dependabot.yml bundles related action updates into one PR — fewer PRs to review for busy maintainers.
Full explanation below image
![Educational infographic 1024x768 showing Dependabot groups configuration. Left: without groups — 5 separate PRs for actions/checkout, setup-node, setup-python, cache, upload-artifact. Right: with groups configuration — one PR bundling all github-actions updates. dependabot.yml snippet: groups: github-actions: patterns: ['actions/']. PR count reduction: 5 -> 1. Time savings icon.](/media/github/gh-200/GH-200-q120-infographic.webp)
Full Explanation
Dependabot's 'groups:' configuration (added in 2023) allows you to bundle related dependency updates into a single PR. For GitHub Actions, you might group all 'actions/' updates together: 'groups: github-actions: patterns: ["actions/"]'. This reduces PR noise significantly — instead of 10 separate PRs for 10 action version bumps, you get one PR. 'batch: true', 'consolidate: all', and 'merge-updates: true' are not valid Dependabot configuration keys. The groups feature works for all Dependabot package ecosystems, not just GitHub Actions.