chore: sync dependabot config from org template synced local '.github/dependabot.yml' with remote 'dependabot/uv.yml'

Author: surmado-config-sync[bot]

.github/dependabot.yml

@@ -5,12 +5,24 @@ updates:
     schedule:
       interval: "weekly"
       day: "monday"
+    # NOTE: uv does not support dependency-type (prod/dev split) yet.
+    # See https://github.com/dependabot/dependabot-core/issues/13202
     groups:
       minor-and-patch:
         patterns: ["*"]
         update-types:
           - "minor"
           - "patch"
+      major:
+        patterns: ["*"]
+        update-types:
+          - "major"
+      security:
+        applies-to: "security-updates"
+        patterns: ["*"]
+    cooldown:
+      default-days: 3
+      semver-major-days: 7
     open-pull-requests-limit: 5
 
   - package-ecosystem: "github-actions"
@@ -19,9 +31,19 @@ updates:
       interval: "weekly"
       day: "monday"
     groups:
-      actions:
+      minor-and-patch:
         patterns: ["*"]
         update-types:
           - "minor"
           - "patch"
+      major:
+        patterns: ["*"]
+        update-types:
+          - "major"
+      security:
+        applies-to: "security-updates"
+        patterns: ["*"]
+    cooldown:
+      default-days: 3
+      semver-major-days: 7
     open-pull-requests-limit: 5