[ajile-in]

Follow-up to #1779's grouping rule. The nestjs group had no update-types filter, so Dependabot bundled the Nest 11 → 12 major (all 20 @nestjs/* packages) into #1781 — which fails CI, and would hold back any pending minor/patch/security fixes until a major migration is done.

Change

• nestjs group → update-types: [minor, patch] — stays continuously mergeable (incl. security-driven minors)
• new nestjs-major group → update-types: [major] — one deferred PR (what chore(deps): bump the nestjs group across 1 directory with 20 updates #1781 will become on its next run), migrated when scheduled
• nestjs-security group unchanged — security updates flow regardless of bump type

Validation

• JSON-schema valid (SchemaStore dependabot-2.0)
• GitHub's native .github/dependabot.yml check on this PR is the authoritative gate

Summary by CodeRabbit

• Chores
  • Automated maintenance updates for the NestJS framework are now organized by update type: minor and patch releases are grouped together, while major releases are tracked separately.
  • Existing security-update handling remains unchanged. These maintenance changes do not alter application features or behavior.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 032551b9-e81a-48b4-b1ac-bb6e03704f18

📥 Commits

Reviewing files that changed from the base of the PR and between 760e522 and 86930d5.

📒 Files selected for processing: 1

• .github/dependabot.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

Dependabot now groups minor and patch updates for @nestjs/* packages separately from major updates.

Changes: NestJS Update Groups

Layer / File(s)	Summary
Separate NestJS update types .github/dependabot.yml	The nestjs group now applies to minor and patch updates. The new nestjs-major group applies to major updates for @nestjs/* packages.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 86930

The configuration separates NestJS major updates from minor and patch updates while preserving security-update grouping. No actionable merge-blocking risk is established; the native Dependabot check remains to be run.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely describes the main change: separating major NestJS updates from minor and patch updates in Dependabot.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}