Merge pull request #198 from GizzZmo/chore/dependabot-groups-noise-reduction

chore(deps): group Dependabot updates to reduce PR noise

Author: GizzZmo

.github/WORKFLOWS.md

@@ -189,7 +189,7 @@ All workflows have been enhanced with:
 
 **Schedule:** Weekly on Monday at 09:00 UTC
 
-**Purpose:** Automated dependency updates
+**Purpose:** Automated dependency updates with grouped PRs to reduce noise
 
 **Ecosystems:**
 
@@ -202,6 +202,14 @@ All workflows have been enhanced with:
 - Weekly schedule to minimize noise
 - Labels: `dependencies`, `automated`
 - Auto-reviewers assigned
+- **Grouped updates** (noise reduction):
+  - `production-dependencies` — minor/patch production deps
+  - `development-dependencies` — minor/patch dev deps
+  - `eslint-stack` — eslint, @eslint/*, @typescript-eslint/*
+  - `vitest-stack` — vitest, @vitest/*
+  - `testing-library` — @testing-library/*
+  - `github-actions` — all Actions minor/patch bumps
+- Major updates still open as individual PRs for review
 
 ---
 
@@ -431,7 +439,7 @@ File: `.github/labeler.yml`
 
 **Automatic Labels:**
 
-- `documentation`: Changes to docs/\*_ or _.md files
+- `documentation`: Changes to docs/\*_ or \*.md files
 - `frontend`: Changes to components/, widgets/, \*.tsx files
 - `backend`: Changes to server/ or C++ files
 - `services`: Changes to services/
@@ -445,71 +453,14 @@ File: `.github/labeler.yml`
 - `size/S`: 10-49 lines changed
 - `size/M`: 50-199 lines changed
 - `size/L`: 200-499 lines changed
-- `size/XL`: 500+ lines changed
+- `size/XL`: ≥ 500 lines changed
 
 ---
 
-## 🛠️ Development Commands
+## 🔄 Maintenance Schedule
 
-### New Scripts Added
-
-```bash
-# Testing
-npm test              # Run tests in watch mode
-npm run test:run      # Run tests once
-npm run test:ui       # Run tests with UI
-npm run test:coverage # Run tests with coverage report
-
-# Linting & Formatting
-npm run lint          # Run ESLint
-npm run lint:fix      # Fix ESLint issues
-npm run format        # Format all files with Prettier
-npm run format:check  # Check formatting without changing files
-
-# Type Checking
-npm run typecheck     # Run TypeScript type checking
-
-# Building
-npm run build         # Build frontend
-npm run build:server  # Build C++ server
-npm run build:all     # Build both frontend and server
-npm run assets:generate # Generate screenshot asset manifest locally
-npm run artifacts:generate # Generate build artifact manifest locally (requires prior `npm run build`)
-```
-
----
-
-## 🎯 Best Practices
-
-### For Contributors
-
-1. ✅ Run `npm run lint` and `npm run format:check` before committing
-2. ✅ Run `npm run test:run` to ensure all tests pass
-3. ✅ Keep PRs focused and reasonably sized (< 500 lines when possible)
-4. ✅ Update documentation for new features
-5. ✅ Add tests for bug fixes and new features
-6. ✅ Follow the PR template guidelines
-7. ✅ Ensure all CI checks pass before requesting review
-
-### For Maintainers
-
-1. ✅ Review security alerts from CodeQL and Dependabot promptly
-2. ✅ Monitor workflow performance reports
-3. ✅ Keep dependencies up to date
-4. ✅ Review and merge Dependabot PRs regularly
-5. ✅ Use workflow badges in README to communicate project health
-6. ✅ Check test coverage trends
-
----
-
-## 🔧 Maintenance
-
-### Regular Tasks
-
-- **Daily**: Automated dependency audits and stale issue checks
-- **Weekly**:
-  - Review Dependabot PRs
-  - Check CodeQL security scan results
+- **Daily**: Stale bot, dependency audit (scheduled)
+- **Weekly**: Dependabot version updates (Monday 09:00 UTC), CodeQL
 - **Monthly**: Review stale issues and PRs manually
 - **Quarterly**:
   - Review and update workflow configurations
@@ -538,5 +489,5 @@ npm run artifacts:generate # Generate build artifact manifest locally (requires
 
 ---
 
-_Last Updated: 2026-08-15_  
+_Last Updated: 2026-08-20_  
 _For questions or issues with workflows, please open an issue with the `ci-cd` label._

.github/dependabot.yml

@@ -16,6 +16,39 @@ updates:
     commit-message:
       prefix: 'chore(deps):'
       include: 'scope'
+    # Group updates to reduce PR noise
+    groups:
+      production-dependencies:
+        dependency-type: 'production'
+        update-types:
+          - 'minor'
+          - 'patch'
+      development-dependencies:
+        dependency-type: 'development'
+        update-types:
+          - 'minor'
+          - 'patch'
+      eslint-stack:
+        patterns:
+          - 'eslint*'
+          - '@eslint/*'
+          - '@typescript-eslint/*'
+        update-types:
+          - 'minor'
+          - 'patch'
+      vitest-stack:
+        patterns:
+          - 'vitest*'
+          - '@vitest/*'
+        update-types:
+          - 'minor'
+          - 'patch'
+      testing-library:
+        patterns:
+          - '@testing-library/*'
+        update-types:
+          - 'minor'
+          - 'patch'
 
   # Enable version updates for GitHub Actions
   - package-ecosystem: 'github-actions'
@@ -34,3 +67,10 @@ updates:
     commit-message:
       prefix: 'chore(actions):'
       include: 'scope'
+    groups:
+      github-actions:
+        patterns:
+          - '*'
+        update-types:
+          - 'minor'
+          - 'patch'