Fix CI on main: revert the grouped NuGet/npm major upgrades; group only minor/patch

[AbhiramCommits]

Summary

All CI jobs on main (build-test, lint, docker) have been red since two grouped Dependabot updates merged:

• Bump the dotnet group with 13 updates #8, the dotnet group (13 NuGet packages, mostly majors). Swashbuckle.AspNetCore 6 → 10 pulls in Microsoft.OpenApi 2.x, which removed the Microsoft.OpenApi.Models namespace, so the API project no longer compiles:

  error CS0234: The type or namespace name 'Models' does not exist in the namespace 'Microsoft.OpenApi'

  The same batch also jumped EF Core 8 → 9, Serilog.AspNetCore 8 → 10, Polly 8 → 10, xunit.runner.visualstudio 2 → 4 and others.

• build(deps-dev): Bump eslint from 9.39.5 to 10.11.0 in the npm group across 1 directory #3, the npm group. ESLint 9 → 10 no longer bundles @eslint/js, which eslint.config.js imports, so npm run lint crashes with "Cannot find package '@eslint/js'".

Changes:

• Revert Bump the dotnet group with 13 updates #8 and build(deps-dev): Bump eslint from 9.39.5 to 10.11.0 in the npm group across 1 directory #3. The .csproj, package.json and package-lock.json files go back byte-for-byte to the last green commit, 50c3db3. The GitHub Actions bumps merged since (Bump actions/setup-dotnet from 4 to 6 #2, Bump actions/upload-artifact from 4 to 7 #4, Bump actions/setup-node from 4 to 7 #5) stay.
• .github/dependabot.yml: the dotnet and npm groups now take only minor and patch updates. Each major (Swashbuckle 10, EF Core 9, ESLint 10 and so on) will arrive as its own PR.

The open Dependabot PR #1 (actions/checkout v4 → v7) isn't affected and is fine to merge once main is green.

Verification (local, mcr.microsoft.com/dotnet/sdk:8.0 and Node 22)

Check	Current main	This branch
dotnet restore	OK	OK
dotnet build -c Release	CS0234	Build succeeded, 0 warnings
dotnet test -c Release (includes the SQL Server Testcontainers tests)	n/a	116/116 passed
dotnet format --verify-no-changes	n/a	clean
npm ci && npm run lint	lint crashes (@eslint/js missing)	passes

🤖 Generated with Claude Code

https://claude.ai/code/session_017d5k8524qtAbirZXdgZAc4

---

Generated by Claude Code