ci: standardize dependabot config

[jeffersongoncalves]

Standardizes .github/dependabot.yml:

• Found: drift (settings differ (cooldown/groups/schedule))
• Weekly schedule, one group per ecosystem, 7-day cooldown (time for a malicious release to be caught before it becomes a PR).
• Every version branch (N.x) gets its own entries via target-branch; Dependabot reads this file from the default branch only.
• Branches that require Filament ignore the next filament/* and tailwindcss majors with an explicit versions range (e.g. >=4.0 on a Filament 3 branch). update-types: semver-major is not enough: without a composer.lock Dependabot cannot classify the update and skips it.
• Entries for directories other than / are kept unchanged.

Dependabot PRs still need manual review (no auto-merge).

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 3b0a344e-041e-4aa7-a91c-c1c42b3ae44c

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}