diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 31f9831f8..6b49e555a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -26,4 +26,9 @@ updates:
     interval: daily
   open-pull-requests-limit: 10
   cooldown:
-    default-days: 7
\ No newline at end of file
+    default-days: 7
+  groups:
+    # init and analyze must be on the same version or the CodeQL job fails
+    codeql-action:
+      patterns:
+        - "github/codeql-action*"
\ No newline at end of file