chore: add Dependabot config

[jeffgreendesign]

Summary

• add weekly Dependabot updates for pnpm/npm dependencies
• add weekly Dependabot updates for GitHub Actions workflows

Verification

• python3 YAML parse/assertion check for .github/dependabot.yml
• write_file YAML syntax check passed

Do not merge yet.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dashboard	Building	Preview, Comment	Jun 8, 2026 2:51am
textrawl	Ready	Preview, Comment	Jun 8, 2026 2:51am

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: bbb7c664-32cb-4cdc-82a4-1d76b988ba64

📥 Commits

Reviewing files that changed from the base of the PR and between 0e42895 and 4ba9cf2.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

Walkthrough

This PR adds a new Dependabot configuration file at .github/dependabot.yml using version 2 format. The configuration establishes automated dependency update checking for two package management systems: npm for package dependencies and github-actions for workflow dependencies. Both are configured to check for updates on a weekly schedule and maintain a maximum of 5 open pull requests simultaneously at the repository root level.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The description covers the key changes but deviates significantly from the repository's template, missing required sections like Type of Change, Checklist items, and Related Issues.	Align the description with the template by adding Type of Change, Checklist, and Related Issues sections, even if some items are marked as not applicable.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'chore: add Dependabot config' clearly and accurately summarizes the main change—adding Dependabot configuration to the repository.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/repo-health-dependabot

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}