chore(config): 优化 Dependabot 合并策略 (启用群组构建)

[one-ea]

主人需要配置合并策略，为了同时满足：

1. 防爆栈（减少刷屏级的 PR 数量通知）
2. 遵守《绝对手动阀门》全局铁律（禁止全自动无脑合并，依然必须由人类最终确认并合并）

我为您重新配置了 Dependabot 的合并策略规则：
使用了 GitHub 官方最近引入的 groups 群组包合并构建。它不仅会把零散的前端更新（Vite/TS）统一打包到一个 client 包 PR 里，还会把后端的（Drizzle相关）和 Actions 统一合并到对应的单一 PR 之中。
从此不管一周更新多少依赖，最多只有 3 个 PR 在排队，再也不用像今天一样点 6 次甚至更多次的 Merge 啦！🎉

[coderabbitai]

Warning

Rate limit exceeded

@one-ea has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 57 minutes and 12 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 57 minutes and 12 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 5cacb45f-2550-424a-a130-86a559e467ef

📥 Commits

Reviewing files that changed from the base of the PR and between 9be97ad and df4cd9c.

📒 Files selected for processing (1)

• .github/workflows/dependabot-auto-merge.yml

📝 Walkthrough

Walkthrough

更新 .github/dependabot.yml 配置，为 npm 依赖（client 和 server）添加分组策略以合并非主要版本更新为单一 PR，并为 GitHub Actions 增强调度设置和分组规则。

Changes

服务 / 文件	变更摘要
Dependabot 配置 .github/dependabot.yml	为 npm 依赖添加分组规则（update-types: [minor, patch]），将非主要版本更新合并为单一 PR；为 GitHub Actions 增加时区配置（timezone: Asia/Shanghai、day: monday、time: 09:00）和分组策略（groups.actions-updates）；调整配置注释描述。

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 分钟

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	PR 标题严格遵循 Conventional Commits 格式（chore(config): description），完整描述了 Dependabot 配置优化和群组构建功能启用。
Description check	✅ Passed	PR 描述与变更集完全相关，清晰阐述了配置变更的目的、实现方式（groups 群组功能）和预期效果。

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/dependabot-group

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch chore/dependabot-group

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}