chore: ignore Dependabot patch releases

[senamakel]

Ignore semver patch updates for every configured ecosystem. Minor and major updates remain eligible, and security updates are unaffected.

Summary by CodeRabbit

• Chores
  • Dependabot will no longer create pull requests for patch-level updates to Cargo dependencies and GitHub Actions.
  • Existing update schedules, grouping, limits, and commit-message settings remain unchanged.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-19T17:30:24.855280Z	29085e6	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 5972fb5b-9fbc-4de1-9be0-a56eb49919b3

📥 Commits

Reviewing files that changed from the base of the PR and between 5d5402d and 29085e6.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The Dependabot configuration now ignores patch-level updates for all Cargo and GitHub Actions dependencies. Existing schedules, limits, prefixes, and grouping settings remain unchanged.

Changes

Dependabot update filtering

Layer / File(s)	Summary
Ecosystem ignore rules .github/dependabot.yml	The Cargo and GitHub Actions update groups ignore version-update:semver-patch updates for all dependency names.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: configuring Dependabot to ignore patch releases.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{A rabbit checks the update queue
Patch hops pause for Cargo too
Actions wait in quiet rows
Weekly paths still gently flow
Fewer tiny changes to review
The burrow stays in order, too}

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

Tiny Sweeper review

⚠️ Review failed for 29085e66945b. the review of #14 did not finish within 900s