From b3ccb25a0ae363071dd0fa78abb1ba980fb72d77 Mon Sep 17 00:00:00 2001
From: Todd Schiller <todd.schiller@gmail.com>
Date: Sat, 13 Jun 2026 11:21:22 -0400
Subject: [PATCH] Chore: group Dependabot updates (react family, prod patches)
 + add pre-commit

- Add a `react` group spanning prod + dev so the React family (react,
  react-dom, react-router, @types/react*, @vitejs/plugin-react,
  eslint-plugin-react-hooks) updates in a single PR at minor + patch.
- Add a `production-deps` patch group so prod patch bumps bundle together.
- Add the `pre-commit` ecosystem, which was drifting unmanaged.

Production minor/major updates still get individual PRs for isolated review.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/dependabot.yml | 40 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 7be9fcd..7a53364 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,4 +1,8 @@
 version: 2
+
+# Group rules are evaluated in order: a dependency joins the first group whose
+# rules it satisfies. `react` comes first so the React family travels together
+# (across prod + dev) instead of being split by dependency-type.
 updates:
   - package-ecosystem: bun
     directory: /extension
@@ -8,6 +12,19 @@ updates:
       default-days: 7
     open-pull-requests-limit: 5
     groups:
+      react:
+        patterns:
+          - react
+          - react-dom
+          - react-router*
+          - "@types/react"
+          - "@types/react-dom"
+          - "@vitejs/plugin-react"
+          - eslint-plugin-react-hooks
+        update-types: [minor, patch]
+      production-deps:
+        dependency-type: production
+        update-types: [patch]
       dev-deps:
         dependency-type: development
         update-types: [minor, patch]
@@ -20,6 +37,19 @@ updates:
       default-days: 7
     open-pull-requests-limit: 5
     groups:
+      react:
+        patterns:
+          - react
+          - react-dom
+          - react-router*
+          - "@types/react"
+          - "@types/react-dom"
+          - "@vitejs/plugin-react"
+          - eslint-plugin-react-hooks
+        update-types: [minor, patch]
+      production-deps:
+        dependency-type: production
+        update-types: [patch]
       dev-deps:
         dependency-type: development
         update-types: [minor, patch]
@@ -32,6 +62,9 @@ updates:
       default-days: 7
     open-pull-requests-limit: 5
     groups:
+      production-deps:
+        dependency-type: production
+        update-types: [patch]
       dev-deps:
         dependency-type: development
         update-types: [minor, patch]
@@ -49,3 +82,10 @@ updates:
       interval: weekly
     cooldown:
       default-days: 7
+
+  - package-ecosystem: pre-commit
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7