Consolidate dependency updates and Dependabot grouping

.github/dependabot.yml

@@ -5,10 +5,43 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
+    groups:
+      dotnet-tooling-minor-patch:
+        applies-to: "version-updates"
+        patterns:
+          - "MinVer"
+          - "coverlet.collector"
+          - "Microsoft.NET.Test.Sdk"
+          - "xunit*"
+        update-types:
+          - "minor"
+          - "patch"
 
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
-
+    groups:
+      codeql-action-major:
+        applies-to: "version-updates"
+        patterns:
+          - "github/codeql-action*"
+        update-types:
+          - "major"
+      codeql-action-minor-patch:
+        applies-to: "version-updates"
+        patterns:
+          - "github/codeql-action*"
+        update-types:
+          - "minor"
+          - "patch"
+      github-actions-minor-patch:
+        applies-to: "version-updates"
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "github/codeql-action*"
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/ci.yml

@@ -32,7 +32,7 @@ jobs:
         run: dotnet build bbt.sln -c Release --no-restore
 
       - name: Test
-        run: dotnet test bbt.sln -c Release --no-build
+        run: dotnet test bbt.sln -c Release --no-build --collect:"XPlat Code Coverage"
 
       - name: Pack (smoke)
         run: dotnet pack src/Bbt/Bbt.csproj -c Release --no-build -o artifacts

.github/workflows/codeql.yml

@@ -35,12 +35,12 @@ jobs:
           dotnet-version: 8.0.x
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13
+        uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
         with:
           languages: ${{ matrix.language }}
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13
+        uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9
 
       - name: Analyze
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13
+        uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9

.github/workflows/trufflehog.yml

@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0
 
       - name: TruffleHog
-        uses: trufflesecurity/trufflehog@6bd2d14f7a4bc1e569fa3550efa7ec632a4fa67b
+        uses: trufflesecurity/trufflehog@00155c9dc586f34d189adc83d3ac2698c2ec551f
         with:
-          version: "3.93.3"
+          version: "3.95.8"
           extra_args: --results=verified,unknown

tests/Bbt.Core.Tests/Bbt.Core.Tests.csproj

@@ -11,7 +11,7 @@
 
   <ItemGroup>
     <PackageReference Include="coverlet.collector" Version="10.0.1" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.4.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>