ci(dependabot): exclude majors from the python group

[ascender1729]

Fixes the root cause of #169: chardet 5->7 (a major) made the 35-package grouped bump unresolvable. Restrict the python group to minor+patch so majors come as individual PRs (mirrors the npm group policy). Config-only change.

Summary by CodeRabbit

• Chores
  • Updated dependency update settings so grouped Python dependency pull requests now include only minor and patch versions.
  • Major version updates will be kept separate from grouped updates for clearer review and safer upgrades.

[coderabbitai]

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)

Validation error: Unrecognized key: "ignore"

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 50ce7d37-b250-4806-91c2-aefc4c1a3e61

📥 Commits

Reviewing files that changed from the base of the PR and between c20d234 and 2b8157a.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

📝 Walkthrough

Walkthrough

The Dependabot configuration for the root Python (pip) ecosystem was updated to restrict grouped dependency update PRs to only minor and patch versions, with added comments explaining the exclusion of major version updates from the grouped flow.

Changes

Dependabot configuration update

Layer / File(s)	Summary
Restrict pip group updates to minor/patch .github/dependabot.yml	Adds an update-types block and comments limiting grouped Python dependency PRs to "minor" and "patch" versions, excluding major updates from the grouped PR flow.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the change: Dependabot’s Python group is restricted to minor and patch updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/dependabot-python-exclude-majors

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cloudflare-workers-and-pages]

Deploying attestix with    Cloudflare Pages

Latest commit:	2b8157a
Status:	✅  Deploy successful!
Preview URL:	https://4157bb9e.attestix.pages.dev
Branch Preview URL:	https://chore-dependabot-python-excl.attestix.pages.dev

View logs