ci: group compatible Dependabot updates

[jbdevprimary]

Groups major and non-major updates for each managed ecosystem and prevents Kubernetes 0.36+ from bypassing the supported Go 1.25.13 baseline.

[coderabbitai]

Warning

Review limit reached

Next included review available in 9 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 5240f495-9e78-466c-aae7-5c79619dad6c

📥 Commits

Reviewing files that changed from the base of the PR and between 044e101 and 4f3c28e.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[amazon-q-developer]

The Dependabot configuration changes are well-structured and correctly implement grouped updates for all three package ecosystems (gomod, npm, github-actions). The Kubernetes version constraints are properly configured to prevent incompatible 0.36+ updates while maintaining Go 1.25.13 compatibility. No blocking issues identified.

---

You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud