chore: Dependabot で actions/* と docker/* を minor/patch グループ化

[nanasess]

概要

EcAuth.IdpUtilities PR #3 のレビューコメント と同じ方針を本リポにも適用。本リポは Docker ワークフローも持つため、actions/* に加えて docker/* も 2 つ目のグループとして追加する。

変更内容

groups:
  actions-minor-patch:
    patterns:
      - "actions/*"
    update-types:
      - "minor"
      - "patch"
  docker-minor-patch:
    patterns:
      - "docker/*"
    update-types:
      - "minor"
      - "patch"

動機

• actions/checkout / actions/setup-dotnet / actions/setup-node / actions/upload-artifact が同週にリリースされた場合、現状は 4 PR が立つ → 集約で 1 PR に
• docker/setup-buildx-action / docker/login-action / docker/metadata-action / docker/build-push-action も同様（4 → 1）
• open-pull-requests-limit: 5 枠の節約
• major update は個別 PR を維持 することで breaking change の見逃しを防ぐ

動作確認

• マージ後、Dependabot が次週 grouping された PR を出すことを確認

🤖 Generated with Claude Code

[coderabbitai]

Warning

Rate limit exceeded

@nanasess has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 30 minutes and 54 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 30 minutes and 54 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: bdec6745-9a59-4fd0-995c-4c51d149d9ff

📥 Commits

Reviewing files that changed from the base of the PR and between 4e8d456 and 2fdd1c9.

📒 Files selected for processing (1)

• .github/dependabot.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/dependabot-grouping

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[gemini-code-assist]

Code Review

This pull request updates the Dependabot configuration to group minor and patch updates for GitHub Actions and Docker dependencies. The reviewer suggested consolidating these into a single group and including the github/* pattern to better manage the open pull request limit.

[gemini-code-assist]

open-pull-requests-limit: 5 の制限を効率的に活用し、PR 数を最小限に抑えるため、actions/* と docker/* を個別のグループに分けず、一つのグループに統合することを検討してください。また、github/*（例: github/codeql-action）も GitHub 公式のアクションとして頻繁に利用されるため、パターンに含めるとより包括的になります。

    # 公式アクション（actions/*, github/*）と docker/* を 1 PR に集約
    # major は breaking change の可能性があるため個別 PR を維持
    groups:
      github-actions-minor-patch:
        patterns:
          - "actions/*"
          - "github/*"
          - "docker/*"
        update-types:
          - "minor"
          - "patch"