diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a71cb44..12a5971 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,3 +5,6 @@ updates:
     schedule:
       interval: "weekly"
       day: "monday"
+    groups:
+      actions:
+        patterns: ["*"]
diff --git a/.github/scripts/security-workflow.test.py b/.github/scripts/security-workflow.test.py
index 2337a08..dd76873 100755
--- a/.github/scripts/security-workflow.test.py
+++ b/.github/scripts/security-workflow.test.py
@@ -121,7 +121,8 @@
 # lockfile owning dependency versions.
 DEPENDABOT = {
     "version": 2,
-    "updates": [{"package-ecosystem": "github-actions", "directory": "/", "schedule": {"interval": "weekly", "day": "monday"}}],
+    "updates": [{"package-ecosystem": "github-actions", "directory": "/", "schedule": {"interval": "weekly", "day": "monday"},
+                 "groups": {"actions": {"patterns": ["*"]}}}],
 }
 
 failures = []