Merge pull request #438 from arii/feature/enhance-dependabot-config

Enhance Dependabot Configuration with Grouping and Schedule

Author: arii

.github/dependabot.yml

@@ -0,0 +1,48 @@
+version: 2
+updates:
+  # 1. NPM Dependencies (The core of your app)
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+      timezone: "America/Los_Angeles" # Aligned with your Bakersfield location
+
+    # LIMIT NOISE: Don't open more than 10 PRs at a time
+    open-pull-requests-limit: 10
+
+    # STRATEGIC GROUPING (Crucial for React/MUI apps)
+    groups:
+      # Update React and Next.js together to avoid peer dependency warnings
+      framework:
+        patterns:
+          - "next"
+          - "react"
+          - "react-dom"
+          - "eslint-config-next"
+
+      # Update all MUI and Emotion packages together to ensure styling consistency
+      mui:
+        patterns:
+          - "@mui/*"
+          - "@emotion/*"
+
+      # Keep your testing suite verified together
+      testing:
+        patterns:
+          - "@playwright/*"
+
+      # Group linting tools to avoid minor formatting diffs in separate PRs
+      linting:
+        patterns:
+          - "eslint"
+          - "eslint-*"
+          - "prettier"
+          - "@typescript-eslint/*"
+
+  # 2. GitHub Actions (Keeps your CI/CD pipeline secure)
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"