Merge branch 'master' into ci-zizmor

Author: notluquis

.github/dependabot.yml

@@ -6,3 +6,26 @@ updates:
     schedule:
       # Check for updates to GitHub Actions every week
       interval: "weekly"
+
+  # npm version updates (security updates run automatically regardless of this)
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    # Wait a week after a release is published before opening a bump for it, so a
+    # freshly published (or later yanked/compromised) version isn't picked up on
+    # day zero.
+    cooldown:
+      default-days: 7
+    groups:
+      # Roll routine minor/patch bumps into one PR to keep the noise down
+      minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"
+    ignore:
+      # @types/node tracks the Node version Electron bundles (24 for Electron 42),
+      # not the newest types, so skip major bumps here.
+      - dependency-name: "@types/node"
+        update-types: ["version-update:semver-major"]