From 8edc0e2ce21451da829e67db11d14956b69912b8 Mon Sep 17 00:00:00 2001
From: David Yaffe <david.yaffe@datadoghq.com>
Date: Wed, 26 Aug 2026 16:06:41 -0400
Subject: [PATCH 1/2] build(deps): group Dependabot security updates

---
 .github/dependabot.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1166d6a6f6e..9c1b78d4175 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,6 +9,10 @@ updates:
       rust-dependencies:
         patterns:
           - "*"
+      rust-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
     open-pull-requests-limit: 10
     ignore:
       - dependency-name: "*"
@@ -34,6 +38,10 @@ updates:
       github-actions:
         patterns:
           - "*"
+      github-actions-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 2
@@ -47,6 +55,10 @@ updates:
       npm-dependencies:
         patterns:
           - "*"
+      npm-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 2

From 9aad215f2dc6cb19994fbb4d5701114db4b8e5d2 Mon Sep 17 00:00:00 2001
From: David Yaffe <david.yaffe@datadoghq.com>
Date: Thu, 27 Aug 2026 12:09:05 -0400
Subject: [PATCH 2/2] fix(deps): point npm updater at UI manifest

---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9c1b78d4175..8291cada91e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -48,7 +48,7 @@ updates:
 
   # NPM dependencies
   - package-ecosystem: npm
-    directory: "/"
+    directory: "/quickwit/quickwit-ui"
     schedule:
       interval: "monthly"
     groups: