Merge pull request #1808 from sigstore/dependabot-grouped-updates

Update Dependabot config to use weekly grouped updates

Author: codysoyland

.github/dependabot.yml

@@ -19,11 +19,20 @@ updates:
 - package-ecosystem: gomod
   directory: "/"
   schedule:
-    interval: daily
+    interval: weekly
   open-pull-requests-limit: 10
+  groups:
+    sigstore:
+      patterns:
+        - "github.com/sigstore/**"
+    minor-patch:
+      update-types: ["minor", "patch"]
 
 - package-ecosystem: "github-actions"
   directory: "/"
   schedule:
-    interval: daily
+    interval: weekly
   open-pull-requests-limit: 10
+  groups:
+    minor-patch:
+      update-types: ["minor", "patch"]