chore: Group dependabot PRs (#99)

Signed-off-by: Ian Lewis <[email protected]>

.github/dependabot.yml

@@ -18,11 +18,54 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
+    groups:
+      # Group all dependencies with minor or patch version updates into one PR.
+      # Security updates and major updates are on separate PRs
+      all-dependencies:
+        applies-to: "version-updates"
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "monthly"
+    groups:
+      # Group all dependencies by with minor or patch version updates into one
+      # PR with production and development dependencies grouped into separate
+      # PRs.
+      # All security updates and major updates are on separate PRs
+      production-dependencies:
+        dependency-type: "production"
+        applies-to: "version-updates"
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      development-dependencies:
+        dependency-type: "development"
+        applies-to: "version-updates"
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "monthly"
+    groups:
+      # Group all dependencies with minor or patch version updates into one PR.
+      # Security updates and major updates are on separate PRs
+      all-dependencies:
+        applies-to: "version-updates"
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"