Run Dependabot for all actions

Create a single PR with all updates to avoid too much noise with
multiple PRs.

.github/dependabot.yml

@@ -1,9 +1,23 @@
 version: 2
 updates:
   - package-ecosystem: "npm"
-    directory: "/block-commits"
+    directories:
+      - "/action-surefire-report"
+      - "/block-commits"
+      - "/github-app-token"
+      - "/slash-command-dispatch"
     schedule:
       interval: "monthly"
+    groups:
+      dependency-updates:
+        applies-to: version-updates
+        update-types:
+        - major
+        - minor
+        - patch
+      security-updates:
+        applies-to: security-updates
+        dependency-type: production
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: