[FEATURE] Group dependabot dependency PRs together

[Eric-Liu-SANDAG]

Is your feature request related to a problem? Please describe

Despite our relatively low number of dependencies in various projects, dependabot still tends to spam PRs as each time a dependency updates there's a new PR

Describe the solution you'd like

Dependabot has an option to group PRs together, see:

• Documentation details: https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--
• Examples: https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/optimizing-pr-creation-version-updates#grouping-related-dependencies-together

Describe alternatives you've considered

N/A

Additional context

N/A

[GregorSchroeder]

After reviewing the documentation, it would appear that adding the following within each package-ecosystem would group minor and patch updates into single PRs while keeping major updates as standalone PRs. @Eric-Liu-SANDAG does this match your thinking?

    groups:
      minor-and-patch-versions:
        applies-to: version-updates  # Applies the group rule to version updates
        update-types:
          - "minor"
          - "patch"
      minor-and-patch-security:
        applies-to: security-updates  # Applies the group rule to security updates
        update-types:
          - "minor"
          - "patch"

[Eric-Liu-SANDAG]

I'm not sure we need it for - package-ecosystem: "github-actions", but definitely in - package-ecosystem: "uv"