diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 825b722..6e673e7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,6 +7,11 @@ updates:
       interval: "weekly"
     cooldown:
       default-days: 7
+    groups:
+      # Keep all codeql-action sub-actions (init/autobuild/analyze) on the same version
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"
     assignees:
       - "NelsonBN"
     reviewers: