chore: Group Dependabot updates and align commit prefixes. (#235)

Bundle minor and patch updates per ecosystem into one pull request each,
while major updates keep coming in individually so breaking changes stay
isolated and reviewable.

Align commit-message prefixes with what ships in the product: ecosystems
whose updates change the released artifact use `fix` (triggering a patch
release), while CI, test, and documentation tooling uses `chore`
(release-neutral). Where an ecosystem distinguishes production from
development dependencies, they are split into separate groups so the two
prefixes apply cleanly.

Replace the team assignee (which GitHub rejects, since assignees must be
individual users) with goloroden; team review already runs through
CODEOWNERS and branch protection.


Claude-Session: https://claude.ai/code/session_01BEb1kvMyuGfpybysH3N7Ln

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: goloroden

.github/dependabot.yml

@@ -1,43 +1,73 @@
 version: 2
 updates:
-- package-ecosystem: pip
-  directory: "/"
-  cooldown:
-    default-days: 7
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  assignees:
-  - thenativeweb/internal_dev
-  labels:
-  - Dependencies
-  commit-message:
-    prefix: chore
+  - package-ecosystem: pip
+    directory: "/"
+    cooldown:
+      default-days: 7
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    assignees:
+      - goloroden
+    labels:
+      - Dependencies
+    commit-message:
+      prefix: fix
+      prefix-development: chore
+    groups:
+      pip-production:
+        dependency-type: production
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+      pip-development:
+        dependency-type: development
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
 
-- package-ecosystem: docker
-  directory: "/tests/shared/docker/eventsourcingdb"
-  cooldown:
-    default-days: 7
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  assignees:
-  - thenativeweb/internal_dev
-  labels:
-  - Dependencies
-  commit-message:
-    prefix: chore
+  - package-ecosystem: docker
+    directory: "/tests/shared/docker/eventsourcingdb"
+    cooldown:
+      default-days: 7
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    assignees:
+      - goloroden
+    labels:
+      - Dependencies
+    commit-message:
+      prefix: chore
+    groups:
+      docker:
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
 
-- package-ecosystem: "github-actions"
-  directory: "/"
-  cooldown:
-    default-days: 7
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  assignees:
-  - thenativeweb/internal_dev
-  labels:
-  - Dependencies
-  commit-message:
-    prefix: chore
+  - package-ecosystem: github-actions
+    directory: "/"
+    cooldown:
+      default-days: 7
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    assignees:
+      - goloroden
+    labels:
+      - Dependencies
+    commit-message:
+      prefix: chore
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch