ci: add commit-message prefixes to dependabot config so PR titles pass lint

[EONRaider]

Summary

• pr-title-lint.yml enforces Conventional Commits shape on PR titles, but Dependabot's default titles (e.g. "Bump actions/checkout from 5.1.0 to 7.0.1") have no type prefix, so every dependency-bump PR fails that check.
• GitHub's commit-message.prefix option in dependabot.yml also drives the generated PR title, not just the commit message, so setting it per ecosystem (chore for the uv group, ci for github-actions) fixes this at the source going forward.
• The 6 currently-open dependabot PRs (ci: bump astral-sh/setup-uv from 6.8.0 to 10.0.1 #159–ci: bump actions/checkout from 5.1.0 to 7.0.1 #164) are being retitled by hand separately since this config change doesn't retroactively affect them.

Test plan

• lint / typecheck / build required checks pass on this PR
• Next weekly Dependabot run produces PRs with chore:/ci:-prefixed titles that pass pr-title-lint.yml without manual intervention

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated automated dependency update commit messages to use consistent prefixes for package and workflow updates.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: d45ea81b-5c14-4fc5-b346-cc8c7fb58a09

📥 Commits

Reviewing files that changed from the base of the PR and between 83d1b15 and f80bdbd.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

Dependabot now applies chore prefixes to uv updates and ci prefixes to GitHub Actions updates.

Changes

Dependabot commit-message configuration

Layer / File(s)	Summary
Configure update prefixes .github/dependabot.yml	The uv update configuration uses the chore prefix. The github-actions update configuration uses the ci prefix.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to f80bd

Dependabot-generated uv and GitHub Actions update titles will use chore and ci prefixes respectively, aligning future updates with the repository’s title convention. No current merge-blocking risk remains.

Suggested reviewers: claude

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the Dependabot configuration change and its purpose: adding commit-message prefixes so generated PR titles pass lint.
Description check	✅ Passed	The description explains the problem, identifies the exact ecosystem prefixes, documents the handling of existing Dependabot PRs, and reports current verification status. It does not use the template'…
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ci/dependabot-title-prefix

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}