chore: add dependabot cooldown and grouping

.github/dependabot.yml

@@ -1,51 +1,77 @@
- version: 2
- updates:
-   - package-ecosystem: "github-actions"
-     directory: "/"
-     schedule:
-       interval: "weekly"
-     reviewers:
-       - "juliansteenbakker"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-   - package-ecosystem: gradle
-     directory: "/android"
-     schedule:
-       interval: "monthly"
-     reviewers:
-       - "juliansteenbakker"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-   - package-ecosystem: gradle
-     directory: "/example/android"
-     schedule:
-       interval: "monthly"
-     reviewers:
-       - "juliansteenbakker"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-   - package-ecosystem: "pub"
-     directory: "/"
-     schedule:
-       interval: "weekly"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-     reviewers:
-       - "juliansteenbakker"
-   # Tracks the CDN-loaded web barcode libraries via the package.json at the
-   # repository root. The pinned versions in
-   # lib/src/web/web_library_versions.dart must be updated to match; the test
-   # in test/web/web_library_versions_test.dart enforces this.
-   - package-ecosystem: "npm"
-     directory: "/"
-     schedule:
-       interval: "weekly"
-     commit-message:
-       prefix: "chore"
-       include: "scope"
-     reviewers:
-       - "juliansteenbakker"
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: gradle
+    directory: /android
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: gradle
+    directory: /example/android
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      example-android:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: pub
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: pub
+    directory: /example
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      example-dart:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: chore
+      include: scope
+
+  # Tracks the CDN-loaded web barcode libraries via the package.json at the
+  # repository root. The pinned versions in
+  # lib/src/web/web_library_versions.dart must be updated to match; the test
+  # in test/web/web_library_versions_test.dart enforces this.
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore
+      include: scope

.github/workflows/auto-assign-pr.yml

@@ -12,4 +12,4 @@ jobs:
   assign-author:
     runs-on: ubuntu-latest
     steps:
-      - uses: toshimaru/auto-author-assign@v3.0.3
+      - uses: toshimaru/auto-author-assign@v3.1.0

.github/workflows/semantic-pr.yml

@@ -7,6 +7,9 @@ on:
       - edited
       - synchronize
 
+permissions:
+  pull-requests: read
+
 jobs:
   main:
     name: Validate PR title