chore(deps): change dependabot prefix

[avivkeller]

Makes Dependabot follow Conventional Commits

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
nodejs-org	Ready	Preview	Jul 30, 2026 3:26pm

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[cursor]

PR Summary

Low Risk
Config-only change to Dependabot commit message formatting; no runtime or application code is affected.

Overview
Updates Dependabot commit-message.prefix from meta to chore(deps) for both the github-actions and npm update jobs in .github/dependabot.yml.

Future dependency PRs will use Conventional Commits-style titles instead of the old meta prefix.

^{Reviewed by Cursor Bugbot for commit f5d8bcc. Bugbot is set up for automated code reviews on this repo. Configure here.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.15%. Comparing base (ca47d6f) to head (f5d8bcc).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #9049      +/-   ##
==========================================
- Coverage   75.16%   75.15%   -0.02%     
==========================================
  Files         102      102              
  Lines        9124     9124              
  Branches      374      374              
==========================================
- Hits         6858     6857       -1     
- Misses       2262     2263       +1     
  Partials        4        4              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

[github-actions]

📦 Build Size Comparison

Summary

Metric	Value
Old Total First Load JS	10.71 MB
New Total First Load JS	10.71 MB
Delta	0 B (0.00%)

[bmuenzenmeyer]

i dont looove this cause a chore usually maps to patch

[avivkeller]

i dont looove this cause a chore usually maps to patch

Dependabot doesn't generate changesets anyway, so a dependabot bump would already be a "patch" (well, more accurately, it'll be excluded from the changelogs entirely, and will release with whatever version is scheduled next)