Group security dependabot updates (#375)

erikdubbelboer · web-flow · commit 49c778a5d6b7 · 2026-06-29T14:04:06.000+02:00
We already do this for normal upgrades.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -38,5 +38,10 @@ updates:
       npm:
         patterns:
           - "*"
+        applies-to: version-updates
+      npm-security:
+        patterns:
+          - "*"
+        applies-to: security-updates
     cooldown:
       default-days: 5
