docs/data/reusables/dependabot/dependabot-version-updates-groups-supported.md

You can only create groups for {% data variables.product.prodname_dependabot_version_updates %}. {% data variables.product.prodname_dependabot_security_updates %} do not support grouped updates. In addition, if there is a grouped pull request for a vulnerable package, {% data variables.product.prodname_dependabot_security_updates %} will always attempt to create a separate pull request, even if the existing group pull request is an update to the same, or a later, version.