From 932433ac893eef73ec6f97a339c3e5ef75a43253 Mon Sep 17 00:00:00 2001
From: mkajander <mb.kajander@gmail.com>
Date: Thu, 9 Jul 2026 22:05:14 +0300
Subject: [PATCH] Consolidate dependency updates and grouping

---
 .github/dependabot.yml                     | 35 +++++++++++++++++++++-
 .github/workflows/ci.yml                   |  2 +-
 .github/workflows/codeql.yml               |  6 ++--
 .github/workflows/trufflehog.yml           |  4 +--
 tests/Bbt.Core.Tests/Bbt.Core.Tests.csproj |  2 +-
 5 files changed, 41 insertions(+), 8 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5dd02e9..27b818d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,10 +5,43 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
+    groups:
+      dotnet-tooling-minor-patch:
+        applies-to: "version-updates"
+        patterns:
+          - "MinVer"
+          - "coverlet.collector"
+          - "Microsoft.NET.Test.Sdk"
+          - "xunit*"
+        update-types:
+          - "minor"
+          - "patch"
 
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
-
+    groups:
+      codeql-action-major:
+        applies-to: "version-updates"
+        patterns:
+          - "github/codeql-action*"
+        update-types:
+          - "major"
+      codeql-action-minor-patch:
+        applies-to: "version-updates"
+        patterns:
+          - "github/codeql-action*"
+        update-types:
+          - "minor"
+          - "patch"
+      github-actions-minor-patch:
+        applies-to: "version-updates"
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "github/codeql-action*"
+        update-types:
+          - "minor"
+          - "patch"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d76e843..d2fb7b8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,7 +32,7 @@ jobs:
         run: dotnet build bbt.sln -c Release --no-restore
 
       - name: Test
-        run: dotnet test bbt.sln -c Release --no-build
+        run: dotnet test bbt.sln -c Release --no-build --collect:"XPlat Code Coverage"
 
       - name: Pack (smoke)
         run: dotnet pack src/Bbt/Bbt.csproj -c Release --no-build -o artifacts
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 35bdc42..45b89c6 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -35,12 +35,12 @@ jobs:
           dotnet-version: 8.0.x
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13
+        uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
         with:
           languages: ${{ matrix.language }}
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13
+        uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
 
       - name: Analyze
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13
+        uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
diff --git a/.github/workflows/trufflehog.yml b/.github/workflows/trufflehog.yml
index 06ab505..07b5b0e 100644
--- a/.github/workflows/trufflehog.yml
+++ b/.github/workflows/trufflehog.yml
@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0
 
       - name: TruffleHog
-        uses: trufflesecurity/trufflehog@6bd2d14f7a4bc1e569fa3550efa7ec632a4fa67b
+        uses: trufflesecurity/trufflehog@00155c9dc586f34d189adc83d3ac2698c2ec551f
         with:
-          version: "3.93.3"
+          version: "3.95.8"
           extra_args: --results=verified,unknown
diff --git a/tests/Bbt.Core.Tests/Bbt.Core.Tests.csproj b/tests/Bbt.Core.Tests/Bbt.Core.Tests.csproj
index e19a0a7..4dd09ca 100644
--- a/tests/Bbt.Core.Tests/Bbt.Core.Tests.csproj
+++ b/tests/Bbt.Core.Tests/Bbt.Core.Tests.csproj
@@ -11,7 +11,7 @@
 
   <ItemGroup>
     <PackageReference Include="coverlet.collector" Version="10.0.1" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.4.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>