lint-commit-message is failing on Dependabot PRs

[bnb]

Currently, it seems like every single Dependabot PR prefixed with meta is failing on the lint-commit-message GitHub Actions CI check.

This is occurring because "Bump" is capitalized, which does not seem to be configurable, according to the Dependabot docs, but the first word must be lower case as a rule in core-validate-commit.

It's unclear to me where this can be best solved, here's what I can identify:

• .github/dependabot.yml would be ideal, but there doesn't actually seem to be any possible path for this as far as I can tell.
• adjusting core-validate-commit is possible, this feels like a bad solution that's compromising our expectations to the platform's quirks.
• writing tooling that pulls the change from Dependabot PRs, closes Dependabot PRs, and then re-opens them with the correct commit title. This feels... wrong.

Wanted to create this issue because it was a repeated issue I saw while reviewing Dependabot updates for Actions. If a decision on how to handle this is made, happy to take on implementing it if the solution is within my skillset.