From b4c889bdee7a5ea7ce8d20f143f94387b2206ecc Mon Sep 17 00:00:00 2001
From: Golo Roden <golo.roden@thenativeweb.io>
Date: Sat, 27 Jun 2026 14:12:31 +0200
Subject: [PATCH] chore: Group Dependabot updates and align commit prefixes.

Bundle minor and patch updates per ecosystem into one pull request each,
while major updates keep coming in individually so breaking changes stay
isolated and reviewable.

Align commit-message prefixes with what ships in the product: ecosystems
whose updates change the released artifact use `fix` (triggering a patch
release), while CI, test, and documentation tooling uses `chore`
(release-neutral). Where an ecosystem distinguishes production from
development dependencies, they are split into separate groups so the two
prefixes apply cleanly.

Replace the team assignee (which GitHub rejects, since assignees must be
individual users) with goloroden; team review already runs through
CODEOWNERS and branch protection.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BEb1kvMyuGfpybysH3N7Ln
---
 .github/dependabot.yml | 108 ++++++++++++++++++++++++++---------------
 1 file changed, 69 insertions(+), 39 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 532d2cd..774b765 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,43 +1,73 @@
 version: 2
 updates:
-- package-ecosystem: pip
-  directory: "/"
-  cooldown:
-    default-days: 7
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  assignees:
-  - thenativeweb/internal_dev
-  labels:
-  - Dependencies
-  commit-message:
-    prefix: chore
+  - package-ecosystem: pip
+    directory: "/"
+    cooldown:
+      default-days: 7
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    assignees:
+      - goloroden
+    labels:
+      - Dependencies
+    commit-message:
+      prefix: fix
+      prefix-development: chore
+    groups:
+      pip-production:
+        dependency-type: production
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+      pip-development:
+        dependency-type: development
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
 
-- package-ecosystem: docker
-  directory: "/tests/shared/docker/eventsourcingdb"
-  cooldown:
-    default-days: 7
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  assignees:
-  - thenativeweb/internal_dev
-  labels:
-  - Dependencies
-  commit-message:
-    prefix: chore
+  - package-ecosystem: docker
+    directory: "/tests/shared/docker/eventsourcingdb"
+    cooldown:
+      default-days: 7
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    assignees:
+      - goloroden
+    labels:
+      - Dependencies
+    commit-message:
+      prefix: chore
+    groups:
+      docker:
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
 
-- package-ecosystem: "github-actions"
-  directory: "/"
-  cooldown:
-    default-days: 7
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  assignees:
-  - thenativeweb/internal_dev
-  labels:
-  - Dependencies
-  commit-message:
-    prefix: chore
+  - package-ecosystem: github-actions
+    directory: "/"
+    cooldown:
+      default-days: 7
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    assignees:
+      - goloroden
+    labels:
+      - Dependencies
+    commit-message:
+      prefix: chore
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch