diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d7e365a..34820aa 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,13 +1,22 @@
-# Dependency updates target dev; they reach main only through a release.
+# Version updates are monthly and grouped into one PR per ecosystem.
+# Security updates are separate and run whenever an advisory is published.
 version: 2
 updates:
-  - package-ecosystem: "pip"
-    directory: "/"
-    target-branch: "dev"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    target-branch: "dev"
-    schedule:
-      interval: "weekly"
+- package-ecosystem: pip
+  directory: /
+  target-branch: dev
+  schedule:
+    interval: monthly
+  groups:
+    all:
+      patterns:
+      - '*'
+- package-ecosystem: github-actions
+  directory: /
+  target-branch: dev
+  schedule:
+    interval: monthly
+  groups:
+    all:
+      patterns:
+      - '*'