chore(ci): enhance Dependabot configuration for GitHub Actions and Pub packages

[xsahil03x]

Summary by CodeRabbit

• Chores
  • Consolidated automated dependency update configuration: grouped updates across workflows and packages, limited concurrent open PRs, standardized commit prefixes, and adjusted rules to ignore semver-patch action updates.
  • Standardized conventional PR title validation scopes: removed outdated entries, added and reordered scopes (including core, localization, persistence, ci, deps, samples) for more consistent semantic PR checks and changelogs.

[coderabbitai]

Walkthrough

Reworks Dependabot config to consolidate grouped updates for GitHub Actions and Pub packages with commit prefix and limits; updates the PR title workflow scopes by removing doc, reordering, and adding core, localization, persistence, ci, deps, samples.

Changes

Cohort / File(s)	Summary
Dependabot configuration .github/dependabot.yml	Consolidates Dependabot entries: groups GitHub Actions (all-actions) and pub packages (all-dependencies), sets open-pull-requests-limit: 10, weekly schedule, commit-message prefix chore(deps), and ignores semver-patch for actions.
PR title workflow scopes .github/workflows/pr_title.yml	Updates conventional_pr_title job scopes input: removes doc, reorders and expands scopes to llc, core, ui, localization, persistence, ci, deps, repo, samples; no other workflow logic changed.

Sequence Diagram(s)

sequenceDiagram
  autonumber
  actor Dependabot as Dependabot (weekly)
  participant Repo as GitHub Repo
  participant PR as Pull Request
  participant CI as pr_title Workflow

  rect rgb(245,250,255)
  note over Dependabot,Repo: Dependabot scans configured ecosystems\n(grouped updates, commit prefix "chore(deps)")
  Dependabot->>Repo: Create/update grouped PR(s)
  Repo->>PR: PR(s) opened with chore(deps) title
  end

  rect rgb(245,255,245)
  note over PR,CI: PR title validation with updated scopes
  PR->>CI: Trigger workflow on open/update
  CI->>CI: Validate conventional commit format and allowed scopes\n(llc, core, ui, localization, persistence, ci, deps, repo, samples)
  CI-->>PR: Report pass/fail status
  end

Loading

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Suggested reviewers

• renefloor

Poem

I twitch my whiskers, tidy and spry,
grouping updates that flutter by.
Titles sharpened, scopes aligned,
chores and deps now well-defined.
A carrot nod — merge on the fly! 🥕

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check	✅ Passed	The title succinctly describes the primary change by indicating that this chore updates the Dependabot configuration for both GitHub Actions and Pub packages, using the conventional “ci” scope to reflect its focus on continuous integration improvements.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch chore/dependabot-improvements

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 0

🧹 Nitpick comments (1)

.github/dependabot.yml (1)

20-22: Reconsider ignoring patch-level updates for Actions.

Suppressing semver patch updates can hide important fixes (including some security remediations that are not flagged separately). Consider removing the ignore rule so Dependabot can surface those updates promptly.

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Disabled knowledge base sources:

• Linear integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 1f501c0 and d15db89.

📒 Files selected for processing (2)

• .github/dependabot.yml (1 hunks)
• .github/workflows/pr_title.yml (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (5)

• GitHub Check: stream_chat_flutter_core
• GitHub Check: stream_chat_persistence
• GitHub Check: stream_chat
• GitHub Check: stream_chat_flutter
• GitHub Check: stream_chat_localizations

🔇 Additional comments (1)

.github/workflows/pr_title.yml (1)

21-41: Scopes update looks solid.

Appreciate the expanded scope list and inline documentation—this keeps PR title expectations aligned with the new Dependabot flows.

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Disabled knowledge base sources:

• Linear integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 02a7068 and b9a53b2.

📒 Files selected for processing (1)

• .github/dependabot.yml (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (5)

• GitHub Check: stream_chat_persistence
• GitHub Check: stream_chat
• GitHub Check: stream_chat_flutter_core
• GitHub Check: stream_chat_localizations
• GitHub Check: stream_chat_flutter