Dependabot grouping

[goosys]

We’ve introduced grouped updates for Dependabot, but some updates are still not being grouped, so we’ll continue maintaining and improving this.

Tasks:

• Dependabot feels a bit noisy #2943
• Modify Dependabot settings for bundler and npm #3013
• Update dependabot.yml to include security patterns #3015

---

Grouped

---
updated-dependencies:
- dependency-name: "@hotwired/turbo-rails"
  dependency-version: 8.0.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@rails/actiontext"
  dependency-version: 8.1.200
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: esbuild
  dependency-version: 0.27.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: sass
  dependency-version: 1.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies

---

Bump @thoughtbot/stylelint-config from 4.0.0 to 5.0.0

---
updated-dependencies:
- dependency-name: "@thoughtbot/stylelint-config"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major

--> Since this is a major version update, I think it’s fine that it isn’t grouped.

---

Bump stylelint from 16.2.1 to 16.26.1

---
updated-dependencies:
- dependency-name: stylelint
  dependency-version: 16.26.1
  dependency-type: direct:development
  update-type: version-update:semver-minor

Bump jquery from 3.7.0 to 3.7.1

---
updated-dependencies:
- dependency-name: jquery
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch

--> Hmm... I wonder why this is happening.