chore(repo): refresh maintenance automation and docs

[HTRamsey]

CI/Build Changes

• refresh the pinned pre-commit hook releases
• validate Dependabot, Codecov, issue-form, and Docker Compose configuration against maintained schemas
• make Hadolint cover the repository Dockerfiles and exclude the vendored CPM.cmake from project CMake style checks
• let Renovate manage composite actions, devcontainers, Dockerfiles, and the Gradle Wrapper while retaining Dependabot ownership of workflow actions
• add a focused CMake development guide and align contributor/CI documentation with the current repository commands

Reason

Several maintenance checks were either stale or ineffective: the Hadolint pattern matched no tracked Dockerfile, project CMake hooks attempted to lint vendored CPM code, and repository metadata beyond build-config.json lacked local schema validation. Dependency automation also did not cover composite actions or development-environment inputs.

The documentation portion ports only the CMake guidance still relevant after the earlier contributor and CI documentation refreshes.

Testing

• Tested workflow locally (act or similar)
• Verified YAML syntax
• Tested on fork before submitting
• uv run --project tools --extra scripts --extra test pytest -q tools/tests .github/scripts/tests (1170 passed)
• just build
• changed-file pre-commit gate
• Dependabot, Codecov, issue-form, Docker Compose, and Renovate validation
• Hadolint, markdownlint, and typos checks

Impact

This affects pre-commit hook versions and coverage, dependency-update discovery, and contributor documentation. It does not change application behavior or workflow permissions. Patch auto-merge remains limited to npm, Python, and pre-commit updates; the newly discovered dependency types require normal review.

Checklist

• I have read the Contribution Guidelines
• Workflow permissions follow least-privilege principle
• No secrets are exposed in logs

---

By submitting this pull request, I confirm that my contribution is made under the terms of the project's dual license (Apache 2.0 and GPL v3).

[Copilot]

Pull request overview

Refreshes repository maintenance automation, dependency discovery, validation, and CMake contributor guidance.

Changes:

• Updates pre-commit tools and expands schema/Dockerfile validation.
• Extends Renovate coverage while preserving Dependabot workflow ownership.
• Adds and links focused CMake documentation.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
deploy/docker/Dockerfile	Documents intentional Hadolint exceptions.
cmake/README.md	Adds CMake development and preset guidance.
.pre-commit-config.yaml	Refreshes hooks and expands validation coverage.
.github/renovate.json	Adds dependency managers and grouping rules.
.github/dependabot.yml	Clarifies workflow-action ownership.
.github/CONTRIBUTING.md	Links the CMake guide.
.github/ci-overview.md	Updates automation and test documentation.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 34.52%. Comparing base (f29efd3) to head (8ef8f13).
⚠️ Report is 351 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #15021      +/-   ##
==========================================
+ Coverage   25.47%   34.52%   +9.05%     
==========================================
  Files         769      945     +176     
  Lines       65912    85586   +19674     
  Branches    30495    39446    +8951     
==========================================
+ Hits        16788    29546   +12758     
+ Misses      37285    36413     -872     
- Partials    11839    19627    +7788     

Flag	Coverage Δ
unittests	34.52% <ø> (+9.05%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 661 files with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 82f2f87...8ef8f13. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Build Results

Platform Status

Platform	Status	Details
Linux	Passed	View
Windows	Passed	View
MacOS	Passed	View
Android	Passed	View

All builds passed.

Pre-commit

Check	Status	Details
pre-commit	Failed (non-blocking)	View

Pre-commit hooks: 2 passed, 75 failed, 7 skipped.

Test Results

linux-coverage-integration: 51 passed, 0 skipped
linux-coverage-unit: 184 passed, 0 skipped
linux-sanitizers-integration: 30 passed, 0 skipped
linux-sanitizers-unit: 184 passed, 0 skipped
Total: 449 passed, 0 skipped

Code Coverage

Coverage: 70.6%

No baseline available for comparison

Artifact Sizes

Artifact	Size
QGroundControl	253.09 MB
QGroundControl-aarch64	177.30 MB
QGroundControl-installer-AMD64	128.41 MB
QGroundControl-installer-AMD64-ARM64	70.82 MB
QGroundControl-installer-ARM64	99.55 MB
QGroundControl-linux	84.76 MB
QGroundControl-mac	84.76 MB
QGroundControl-x86_64	189.56 MB
No baseline available for comparison

---

_{Updated: 2026-09-01 21:37:17 UTC • Commit: 8ef8f13 • Triggered by: Linux}