[somethingwithproof]

Summary

Add update-types: [minor, patch] to the GitHub Actions group in .github/dependabot.yml so a major action update opens as its own pull request instead of landing in the same one as minor and patch bumps.

Verification

• The file validates against the Dependabot v2 JSON schema.
• Only the update-types lines were added.

Summary by CodeRabbit

• Chores
  • Automated update grouping is now limited to minor and patch releases.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: ab90a900-a607-4d26-b73d-13b3b809b51b

📥 Commits

Reviewing files that changed from the base of the PR and between 39efd74 and 6636d1f.

📒 Files selected for processing: 1

• .github/dependabot.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

The Dependabot configuration now limits grouped GitHub Actions dependency updates to minor and patch versions.

Changes: Actions dependency updates

Layer / File(s)	Summary
Restrict grouped update types .github/dependabot.yml	The Actions dependency group is limited to minor and patch updates.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: thomasvincent

Merge Risk: ⚪ Minimal · up to 6636d

The configuration correctly groups only minor and patch GitHub Actions updates; major updates remain separate.

Pre-merge checks: 4 · 1

Failed checks: 1 warning

Check name	Status	Explanation	Resolution
Description check		The description explains the change and provides verification details, but it omits the required Related Issue, Type of change, How Has This Been Tested?, and Checklist sections from the repository te…	Update the description to include all template sections. Add the related issue or state that none applies, select the change type, describe the tests performed, and complete the checklist.

Passed checks: 4 passed

Check name	Status	Explanation
Title check		The title clearly identifies the main change: major GitHub Actions updates will open as separate Dependabot pull requests.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Description check

Explanation

The description explains the change and provides verification details, but it omits the required Related Issue, Type of change, How Has This Been Tested?, and Checklist sections from the repository template.

Resolution

Update the description to include all template sections. Add the related issue or state that none applies, select the change type, describe the tests performed, and complete the checklist.

• Fix all pre-merge checks with AI

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the update list,
And skips the major versions with a twist.
Minor and patch hop into view,
The Actions group keeps just those two.
Then off I bounce beneath the moon.}

_{Comment @coderabbitai help to get the list of available commands.}

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Separating major Actions updates could increase review workload or leave breaking upgrades pending; this changes Dependabot's PR-generation behavior.

Restricts the GitHub Actions Dependabot group in .github/dependabot.yml to update-types: [minor, patch] so major action updates open as separate pull requests. No issues found.

Verification

Rules No rules evaluated

Functional validation Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

---

Important

Your trial ends in 2 days — upgrade now to keep code review, CI analysis, auto-apply, custom automations, and more.

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud