fix: isolate Swift action updates from dependency groups

.github/dependabot.yml

@@ -21,6 +21,10 @@ updates:
         applies-to: version-updates
         patterns:
           - "*"
+        # Swift major tags can move before a stable release. Keep them in a
+        # separately reviewable PR that must carry runtime consumer evidence.
+        exclude-patterns:
+          - swift-actions/setup-swift
   - package-ecosystem: pip
     directory: "/"
     schedule:

CHANGELOG.md

@@ -10,6 +10,10 @@
 
 ### Changed
 
+- Exclude `swift-actions/setup-swift` from the broad GitHub Actions Dependabot
+  group so major Swift action updates receive a separate review and runtime
+  consumer proof instead of blocking unrelated stable action updates.
+
 - Make `private-static.yml` caller-provided install and validation command
   blocks fail on the first unsuccessful command, and enforce both fail-fast
   runners through the reusable-workflow contract validator.