From 1b429a12a58986c9a56eb7ab7eaea2c1e8b096a1 Mon Sep 17 00:00:00 2001
From: mhucka <mhucka@google.com>
Date: Fri, 17 Apr 2026 23:18:22 +0000
Subject: [PATCH 1/3] Reduce number of Dependabot PRs

This changes 2 things:

- Enable grouped updates. Instead of a separate PR for every package,
  Dependabot can combine them into a single "dependency update" PR.

- Limit to direct dependencies. We can use the allow key to restrict it
  to only the packages you explicitly list in the `requirements.in`.
---
 .github/dependabot.yaml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 949cb6ba..a20039b2 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -25,11 +25,19 @@ updates:
       - "area/health"
 
   - package-ecosystem: "pip"
-    directories:
-      - "**/*"
+    directory: "/src/py"
+    allow:
+      - dependency-name: stim
+      - dependency-name: pytest
+      - dependency-name: sinter
+      - dependency-name: pybind11-stubgen
     schedule:
-      interval: "monthly"
+      interval: "weekly"
     versioning-strategy: "increase-if-necessary"
+    groups:
+      python-dependencies:
+        patterns:
+          - "*"
     labels:
       - "area/dependencies"
       - "area/python"

From 097bbac6e136187a5223b59dded3dd412a6478d6 Mon Sep 17 00:00:00 2001
From: mhucka <mhucka@google.com>
Date: Fri, 17 Apr 2026 23:18:51 +0000
Subject: [PATCH 2/3] Make a note to update Dependabot config

If `requirements.in` is changed, the list of dependencies in the
Dependabot config file should be updated too.
---
 src/py/requirements.in | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/py/requirements.in b/src/py/requirements.in
index c7c02874..9b52cb5f 100644
--- a/src/py/requirements.in
+++ b/src/py/requirements.in
@@ -1,4 +1,7 @@
+# Note: if you add or subtract from the list below, also update the "allow"
+# list in ../../.github/dependabot.yaml.
+
 stim
 pytest
 sinter
-pybind11-stubgen
\ No newline at end of file
+pybind11-stubgen

From 73d2a791ff19009a56668656cc2a381992ba21bb Mon Sep 17 00:00:00 2001
From: mhucka <mhucka@google.com>
Date: Fri, 17 Apr 2026 23:23:56 +0000
Subject: [PATCH 3/3] Undo accidently change to frequency

---
 .github/dependabot.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index a20039b2..c1306679 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -32,7 +32,7 @@ updates:
       - dependency-name: sinter
       - dependency-name: pybind11-stubgen
     schedule:
-      interval: "weekly"
+      interval: "monthly"
     versioning-strategy: "increase-if-necessary"
     groups:
       python-dependencies: