[kleinbem]

Nothing kept the actions pinned in this repo's workflows current. Adds the fleet's usual github-actions entry: weekly, 7-day cooldown, minor/patch in one grouped PR, majors as their own PRs.

Part of a fleet-wide Dependabot coverage sweep; no composite actions or other package manifests live here.

Tested: YAML parses. Dependabot validates the config once this merges.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Scheduled maintenance checks now run weekly, with related updates grouped together and a seven-day waiting period applied by default. These changes support more predictable upkeep without affecting the app’s features or how it works for users.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

Dependabot is configured to check GitHub Actions weekly, apply a seven-day default cooldown, and group minor and patch updates.

Changes: GitHub Actions updates

Layer / File(s)	Summary
Configure GitHub Actions updates .github/dependabot.yml	Adds Dependabot version 2 settings for weekly checks, a seven-day default cooldown, and a group covering minor and patch updates.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Possibly related PRs

• kleinbem-dev/coderabbit#8: Adds a workflow with pinned GitHub Actions, which this Dependabot configuration can update.
• kleinbem-dev/coderabbit#9: Updates pinned actions in the fleet-lint workflow, which this Dependabot configuration can keep current.

Merge Risk: Minimal · up to 36943

No actionable merge-blocking risk is established. Dependabot configuration validation remains expected after merge.

Architecture risk: Low · up to 36943

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

• observed — Modified behavior in .github/dependabot.yml: Adds Dependabot version 2 configuration for GitHub Actions in /, with weekly checks, a seven-day default cooldown, and an actions group matching all dependencies for minor and patch updates.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title describes the Dependabot configuration that keeps pinned GitHub Actions current.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Recent review info

Run configuration

• Source mode: Auto
• Repository: kleinbem-dev/coderabbit
• Branch: main
• File: .coderabbit.yaml
• Commit: fcc250e
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 846afa3d-4bef-4486-bed7-e27f5acf6a44

Commits

Reviewing files that changed from the base of the PR and between fcc250e and 3694322.

Files selected for processing: 1

• .github/dependabot.yml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 7 remain after this review.