diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0b388560..51f35991 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,77 +3,26 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "monthly"
       day: "monday"
       time: "06:00"
       timezone: "UTC"
+    open-pull-requests-limit: 1
+    groups:
+      github-actions:
+        patterns:
+          - "*"
 
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "monthly"
       day: "monday"
       time: "06:00"
       timezone: "UTC"
-    open-pull-requests-limit: 10
-    rebase-strategy: "auto"
-
-  - package-ecosystem: "npm"
-    directory: "/apps/api"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-      timezone: "UTC"
-    open-pull-requests-limit: 10
-    rebase-strategy: "auto"
-
-  - package-ecosystem: "npm"
-    directory: "/apps/web"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-      timezone: "UTC"
-    open-pull-requests-limit: 10
-    rebase-strategy: "auto"
-
-  - package-ecosystem: "npm"
-    directory: "/apps/worker"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-      timezone: "UTC"
-    open-pull-requests-limit: 10
-    rebase-strategy: "auto"
-
-  - package-ecosystem: "npm"
-    directory: "/packages/db"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-      timezone: "UTC"
-    open-pull-requests-limit: 10
-    rebase-strategy: "auto"
-
-  - package-ecosystem: "npm"
-    directory: "/packages/shared"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-      timezone: "UTC"
-    open-pull-requests-limit: 10
-    rebase-strategy: "auto"
-
-  - package-ecosystem: "npm"
-    directory: "/packages/sim"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-      timezone: "UTC"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 1
     rebase-strategy: "auto"
+    groups:
+      npm-all:
+        patterns:
+          - "*"
diff --git a/.releases/unreleased/20260309103504-consolidate-dependabot-config.md b/.releases/unreleased/20260309103504-consolidate-dependabot-config.md
new file mode 100644
index 00000000..2a12cce3
--- /dev/null
+++ b/.releases/unreleased/20260309103504-consolidate-dependabot-config.md
@@ -0,0 +1,5 @@
+---
+type: patch
+area: ci
+summary: Consolidate Dependabot config to a single grouped npm entry to prevent mass PR openings
+---