Update dependabot.yml

.github/dependabot.yml

@@ -1,18 +1,62 @@
+# Based on https://github.com/yoanm/shared-config/blob/master/GitHub/dependabot.yml file
 version: 2
 updates:
+#
+#
+# [GHAction]
+#
+#
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: 'monthly'
+    commit-message:
+      prefix: "[dependabot][ghaction] - " # No need to specify prod/dev for GHAction as there is only "production" updates !
+      include: "scope"
     groups:
+# Group all basic updates inside the a single PR
+# No need to split prod/dev as there is only prod updates
       all-actions:
+        applies-to: "version-updates"
         patterns: ["*"]
+# Group all security updates inside the a single PR
+# No need to split prod/dev as there is only prod updates
+# +Most likely no need to split major and other updates either
+      SECURITY-all:
+        applies-to: "security-updates"
+        patterns: ["*"]
+#
+#
+# [Go]
+#
+#
   - package-ecosystem: gomod
     directory: /
     schedule:
       interval: monthly
+#    versioning-strategy: "....." # Not applicable (currently) for gomod :/
+    commit-message:
+      prefix: "[dependabot][prod][gomod] - " # No need to specify prod/dev for Go as there is only "production" packages !
+      include: "scope"
     groups:
-      gomod-major:
+# Split basic updates by:
+#  - ~prod vs dev~ => Not applicable for Go packages :/
+#  - major vs others (assuming packages properly follow semver !)
+      prod-majors:
+        applies-to: "version-updates"
         update-types: ["major"]
-      gomod-others:
+      prod-others:
+        applies-to: "version-updates"
         patterns: [ "*" ]
+# Split security updates by:
+#  - ~prod vs dev~ => Not applicable for Go packages :/
+#  - Major prod updates vs other prod updates
+      SECURITY-prod-major:
+        applies-to: "security-updates"
+        dependency-type: "production"
+        update-types: ["major"]
+        patterns: ["*"]
+      SECURITY-prod:
+        applies-to: "security-updates"
+        dependency-type: "production"
+        patterns: ["*"]