chore(deps): enhance dependency grouping in dependabot (#228)

Add typescript-eslint to npm-eslint-ecosystem group for atomic updates with ESLint, create npm-yaml group for js-yaml and @types/js-yaml to keep types synchronized, and update dependency management guidelines to require grouping packages with their corresponding @types/* packages.

Author: groupsky

.github/dependabot.yml

@@ -57,6 +57,7 @@ updates:
         patterns:
           - 'eslint'
           - 'eslint-*'
+          - 'typescript-eslint'
           - '@typescript-eslint/eslint-plugin'
           - '@typescript-eslint/parser'
         update-types:
@@ -105,6 +106,7 @@ updates:
           - '@types/*'
         exclude-patterns:
           - '@types/jest'
+          - '@types/js-yaml'
         update-types:
           - 'minor'
           - 'patch'
@@ -124,6 +126,15 @@ updates:
         update-types:
           - 'minor'
           - 'patch'
+      # YAML processing - types must stay synchronized with runtime
+      npm-yaml:
+        applies-to: version-updates
+        patterns:
+          - 'js-yaml'
+          - '@types/js-yaml'
+        update-types:
+          - 'minor'
+          - 'patch'
       # Note: Security updates are not grouped - they create immediate individual PRs
     open-pull-requests-limit: 10
     rebase-strategy: 'auto'

docs/agents/dependencies.md

@@ -41,8 +41,10 @@ paths: package.json
 - GROUP interdependent packages together in dependabot.yml
 - Packages with peer dependencies MUST be updated atomically (e.g., eslint + @typescript-eslint/\*)
 - Monorepo packages from same source SHOULD be grouped (e.g., @lerna-lite/\*)
+- Packages MUST be grouped with their corresponding @types/\* packages (e.g., js-yaml + @types/js-yaml)
 - GROUP minor/patch updates only; major updates need individual review
 - USE `patterns: ['@scope/*']` for scoped packages, specific names otherwise
+- EXCLUDE grouped @types/\* packages from the generic npm-types group
 - See `.github/dependabot.yml` groups section for examples
 
 ## Update Workflow