From 0fe5db3f288153b74e19ada6b23b3a5e85a10635 Mon Sep 17 00:00:00 2001
From: Joonas Kerttula <joonas.kerttula@codemate.com>
Date: Wed, 16 Sep 2026 14:27:05 +0300
Subject: [PATCH] ci(dependabot): group updates and skip macOS CI jobs on bot
 PRs

---
 .github/dependabot.yml   | 56 ++++++++++++++++++++++++++++++++++++++--
 .github/workflows/ci.yml |  6 +++++
 2 files changed, 60 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 28f1570..1031040 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,7 +14,59 @@
 
 version: 2
 updates:
+  # The root manifest is the yarn workspace root, so this covers example/ too.
   - package-ecosystem: "npm"
-    directory: "/"
+    directory: "/" # Location of package manifests
     schedule:
-      interval: "weekly"
\ No newline at end of file
+      interval: "weekly"
+    open-pull-requests-limit: 3
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore(deps)
+    groups:
+      npm-dependencies:
+        patterns:
+          - "*"
+  - package-ecosystem: "gradle"
+    directory: "/android" # Location of package manifests
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 3
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore(deps)
+    groups:
+      android-dependencies:
+        patterns:
+          - "*"
+  - package-ecosystem: "gradle"
+    directory: "/example/android" # Location of package manifests
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 3
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore(deps)
+    groups:
+      example-android-dependencies:
+        patterns:
+          - "*"
+  # Composite actions live outside .github/workflows and need their own directory.
+  - package-ecosystem: "github-actions"
+    directories: # Location of package manifests
+      - "/"
+      - "/.github/actions/*"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 3
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore(deps)
+    groups:
+      actions-dependencies:
+        patterns:
+          - "*"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8dfe17d..ca823f6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,6 +24,11 @@ on:
   pull_request:
     branches:
       - main
+    paths-ignore:
+      - '**.md'
+      - 'LICENSE'
+      - '.github/workflows/license-check.yaml'
+      - '.github/workflows/release-please.yml'
   workflow_call:
 
 jobs:
@@ -188,6 +193,7 @@ jobs:
           yarn turbo run build:android --cache-dir="${{ env.TURBO_CACHE_DIR }}"
 
   build-ios:
+    if: github.actor != 'dependabot[bot]'
     runs-on:
       labels: macos-26-xlarge
     timeout-minutes: 45