chore: group Dependabot updates into a single PR per ecosystem

.github/dependabot.yml

@@ -1,18 +1,44 @@
 version: 2
 updates:
-  # Mantém as GitHub Actions pinadas por SHA sempre frescas: o Dependabot atualiza
-  # tanto o SHA do commit quanto o comentário `# vX`, então os pins não envelhecem.
-  - package-ecosystem: github-actions
-    directory: /
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
-      interval: weekly
+      interval: "weekly"
+    open-pull-requests-limit: 5
     commit-message:
-      prefix: ci
-
-  # Dependências npm da extensão (package.json na raiz).
-  - package-ecosystem: npm
-    directory: /
+      prefix: "chore(deps)"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+  - package-ecosystem: "npm"
+    directory: "/"
     schedule:
-      interval: weekly
+      interval: "weekly"
+    open-pull-requests-limit: 5
     commit-message:
-      prefix: deps
+      prefix: "chore(deps)"
+    groups:
+      npm:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+  - package-ecosystem: "pip"
+    directory: "/docs"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "chore(deps)"
+    groups:
+      pip:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"