chore(deps): bump ollama/ollama from 0.21.0 to 0.21.2 in the docker-compose group across 1 directory

CHANGELOG.md

@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Dependabot CHANGELOG automation + ecosystem labels.** New `.github/workflows/dependabot-changelog.yml` runs on `pull_request_target` filtered to `dependabot[bot]`-authored PRs and prepends a one-line `### Changed` entry under `[Unreleased]` summarizing the bumped packages and version arrows. Authentication uses a GitHub App installation token (minted via `actions/create-github-app-token@v3.1.1`, requires repo secrets `BOT_APP_ID` + `BOT_APP_PRIVATE_KEY`) rather than `secrets.GITHUB_TOKEN` so the workflow's commit re-fires required CI checks (lint, typecheck, test, qa-gate, scan) — pushes by `GITHUB_TOKEN` are silently skipped by GitHub's anti-loop policy and would leave required checks unsatisfied on the bot's HEAD SHA, blocking merge under main-protection. `dependabot/fetch-metadata` pinned to `@v3.1.0` (full SHA) — earlier 2.x versions return empty `prevVersion`/`newVersion` on grouped updates. Inline composer carries the Keep-a-Changelog v1.1.0 ordering fix (Added → Changed → Deprecated → Removed → Fixed → Security): when creating a fresh `### Changed` subsection, walks forward to insert before the first later-sorting subsection (or end of `[Unreleased]`) instead of placing it at `unreleased_idx + 1`. Loop guard skips on bot-authored last commit; idempotency guard skips when CHANGELOG already references the PR number. Detects both `## Unreleased` and `## [Unreleased]` heading styles; this repo uses the bracketed form. Repo labels `python`, `github-actions`, `docker` created (`dependencies` already existed) so Dependabot stops silently skipping them. Ports the `dependabot-pr-hygiene-playbook` validated on cmeans/mcp-synology (PR #58 + #63 ordering fix), cmeans/mcp-clipboard, and cmeans/pypi-winnow-downloads.
 
 ### Changed
+- **Bump docker-compose group: ollama/ollama 0.21.0→0.21.2** (#398)
 - **Bump github-actions group: docker/build-push-action 6.19.2→7.1.0, docker/setup-buildx-action 3.12.0→4.0.0** (#397)
 - **`.github/dependabot.yml` commit-message prefix corrected to bare `chore`.** Previous setting `prefix: "chore(deps)"` combined with `include: "scope"` produced doubled prefixes like `chore(deps)(deps): bump foo` because Dependabot auto-appends the `(deps)` scope when `include: scope` is set. Bare `chore` plus `include: scope` yields the canonical `chore(deps): bump foo`. Existing open Dependabot PRs (#397, #398) that landed before this change carry the doubled prefix in their titles; recreating them via `@dependabot recreate` after this PR merges will pick up the corrected commit-message config and the new auto-CHANGELOG workflow simultaneously. All four ecosystem blocks updated (pip, github-actions, docker, docker-compose).
 

docker-compose.qa.yaml

@@ -74,7 +74,7 @@ services:
       start_period: 10s
 
   ollama-qa:
-    image: ollama/ollama:0.21.0
+    image: ollama/ollama:0.21.2
     container_name: awareness-ollama-qa
     restart: unless-stopped
     ports: