Add Dependabot configuration for dependency updates

[andife]

Configure Dependabot for npm and GitHub Actions updates.

Summary by CodeRabbit

• Chores
  • Enabled automated weekly dependency updates for package ecosystems (npm and GitHub Actions).
  • Limits on concurrent update pull requests to reduce noise and simplify review.
  • Standardized update pull request formatting to make change intent clearer.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 1bc5e9e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 4bcf1b44-2274-4634-a012-f4a359b7fe38

📥 Commits

Reviewing files that changed from the base of the PR and between 6903b80 and 1bc5e9e.

📒 Files selected for processing (1)

• .github/dependabot.yml

✅ Files skipped from review due to trivial changes (1)

• .github/dependabot.yml

---

📝 Walkthrough

Walkthrough

Adds a Dependabot configuration at the repository root that schedules weekly automated dependency updates for npm and GitHub Actions, limits concurrent open PRs (npm: 10, actions: 5), and standardizes commit-message prefixes and inclusion of scope.

Changes

Cohort / File(s)	Summary
Dependabot Configuration ​.github/dependabot.yml	New Dependabot config (version: 2). Schedules weekly updates for npm (max 10 open PRs, commit-message prefix: chore, include: scope) and github-actions (max 5 open PRs, commit-message prefix: ci, include: scope).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐇 I hopped through commits, neat and spry,
Dependabot hums as weeks go by.
Chore and CI, scoped with care,
PRs in order, tidy and fair.
A rabbit cheers — updates everywhere!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Add Dependabot configuration for dependency updates' directly and accurately describes the main change: adding a new Dependabot configuration file to enable automated dependency updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.github/dependabot.yml:
- Around line 9-12: Remove the invalid dependabot option `prefix-scope` from the
`commit-message` block: in the `commit-message` configuration where `prefix:
"chore"` and `include: "scope"` are set, delete the `prefix-scope: "deps"` line
(the `prefix-scope` key is not supported); keep `prefix` and `include` so
Dependabot will produce commit messages like `chore(deps): ...` and
`chore(deps-dev): ...`.
- Around line 20-23: Remove the invalid "prefix-scope" option from the
dependabot configuration: in the commit-message block drop the "prefix-scope:
\"deps\"" line and keep only supported keys (e.g., "prefix: \"ci\"" and
"include: \"scope\""); if you intended a different behavior consider using
"prefix-development" or adjusting "prefix" instead, but do not use
"prefix-scope" in the commit-message section.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 2cf086bb-d3ce-4455-b7d6-556b001a8a80

📥 Commits

Reviewing files that changed from the base of the PR and between 97a7d9b and 6903b80.

📒 Files selected for processing (1)

• .github/dependabot.yml