From f3f9b132404e2a6a1dd353ddaf32c221a540dc6d Mon Sep 17 00:00:00 2001
From: Julian Steenbakker <jst@beverinnovations.com>
Date: Wed, 9 Sep 2026 21:32:42 +0200
Subject: [PATCH] chore: add dependabot cooldown and grouping, fix funding file
 name

---
 .github/{funding.yml => FUNDING.yml} |   0
 .github/dependabot.yml               | 128 ++++++++++++++++-----------
 .github/workflows/auto-assign-pr.yml |   2 +-
 .github/workflows/semantic-pr.yml    |   3 +
 4 files changed, 81 insertions(+), 52 deletions(-)
 rename .github/{funding.yml => FUNDING.yml} (100%)

diff --git a/.github/funding.yml b/.github/FUNDING.yml
similarity index 100%
rename from .github/funding.yml
rename to .github/FUNDING.yml
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1aafb9f52..18e2a24b0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,51 +1,77 @@
- version: 2
- updates:
-   - package-ecosystem: "github-actions"
-     directory: "/"
-     schedule:
-       interval: "weekly"
-     reviewers:
-       - "juliansteenbakker"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-   - package-ecosystem: gradle
-     directory: "/android"
-     schedule:
-       interval: "monthly"
-     reviewers:
-       - "juliansteenbakker"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-   - package-ecosystem: gradle
-     directory: "/example/android"
-     schedule:
-       interval: "monthly"
-     reviewers:
-       - "juliansteenbakker"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-   - package-ecosystem: "pub"
-     directory: "/"
-     schedule:
-       interval: "weekly"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-     reviewers:
-       - "juliansteenbakker"
-   # Tracks the CDN-loaded web barcode libraries via the package.json at the
-   # repository root. The pinned versions in
-   # lib/src/web/web_library_versions.dart must be updated to match; the test
-   # in test/web/web_library_versions_test.dart enforces this.
-   - package-ecosystem: "npm"
-     directory: "/"
-     schedule:
-       interval: "weekly"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-     reviewers:
-       - "juliansteenbakker"
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: gradle
+    directory: /android
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: gradle
+    directory: /example/android
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      example-android:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: pub
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: pub
+    directory: /example
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      example-dart:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: chore
+      include: scope
+
+  # Tracks the CDN-loaded web barcode libraries via the package.json at the
+  # repository root. The pinned versions in
+  # lib/src/web/web_library_versions.dart must be updated to match; the test
+  # in test/web/web_library_versions_test.dart enforces this.
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore
+      include: scope
diff --git a/.github/workflows/auto-assign-pr.yml b/.github/workflows/auto-assign-pr.yml
index b73b5ac2a..425c6979b 100644
--- a/.github/workflows/auto-assign-pr.yml
+++ b/.github/workflows/auto-assign-pr.yml
@@ -12,4 +12,4 @@ jobs:
   assign-author:
     runs-on: ubuntu-latest
     steps:
-      - uses: toshimaru/auto-author-assign@v3.0.3
+      - uses: toshimaru/auto-author-assign@v3.1.0
diff --git a/.github/workflows/semantic-pr.yml b/.github/workflows/semantic-pr.yml
index 5f64b7603..daa7ebefc 100644
--- a/.github/workflows/semantic-pr.yml
+++ b/.github/workflows/semantic-pr.yml
@@ -7,6 +7,9 @@ on:
       - edited
       - synchronize
 
+permissions:
+  pull-requests: read
+
 jobs:
   main:
     name: Validate PR title