Adam Jones 4ca2b2626a fix: add dependabot.yml to fix npm workspaces issues ...

Adds dependabot configuration to address npm workspace lockfile issues
that caused PR #3021 to fail.

The root cause was Dependabot trying to update the same package (glob)
to different major versions across workspace directories, creating an
inconsistent package-lock.json that fails `npm ci`.

Key changes:
- Configure npm updates from root directory only (per issue #6346)
- Use versioning-strategy: increase for consistent lockfile updates
- Explicitly configure security update grouping via applies-to

See:
- https://github.com/dependabot/dependabot-core/issues/6346
- https://github.com/dependabot/dependabot-core/issues/7157

2025-11-26 12:45:43 +00:00

..

workflows

chore(uv): Prefer --locked for dependency sync (#1852)

2025-11-25 21:36:35 +00:00

dependabot.yml

fix: add dependabot.yml to fix npm workspaces issues

2025-11-26 12:45:43 +00:00

pull_request_template.md

Update pull_request_template.md

2024-12-03 13:29:49 +00:00