[MarketDataApp]

Brings this repo in line with §17.4 of the SDK Requirements (sdk/sdk-requirements.md in MarketDataApp/documentation), which now covers repository and release configuration.

Ungrouped, Dependabot opens one PR per dependency per manifest. A single upstream release becomes a wall of near-identical PRs, and the updates stop being read — which is the failure mode that matters, since unread dependency PRs are how a security bump gets missed.

This adopts the pattern sdk-php already uses, the only SDK that was doing this correctly:

• github-actions — all action bumps bundle into one PR.
• Gradle — minor and patch bundle into one PR; majors stay individual PRs, since they can break consumers and need to be read one at a time.

Existing settings (labels, schedule, cooldown, PR limits, comments) are preserved.

Config only — no source, no tests, no release.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.27%. Comparing base (78e39a0) to head (207cec9).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main      #65   +/-   ##
=========================================
  Coverage     98.27%   98.27%           
  Complexity     1043     1043           
=========================================
  Files           123      123           
  Lines          2606     2606           
  Branches        301      301           
=========================================
  Hits           2561     2561           
  Partials         45       45           

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f0649d7...207cec9. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.