chore(dependabot): remove the Dependabot configuration

[CybotTM]

Renovate is the dependency-update tool for this organization and it is live here — Dependency Dashboard #16. Dependabot duplicated it: both bots opened a pull request for the same update, and whichever merged first left the other to be closed or auto-closed, costing CI minutes and review attention twice.

Nothing loses coverage. Measured on this repository rather than assumed:

• the removed .github/dependabot.yml declared: composer,github-actions
• Renovate currently detects: .pre-commit-config.yaml,composer,composer.json,github-actions,npm,package.json,pre-commit

Renovate also carries the policy the Dependabot block never had — stability days, the automerge rules and the deps-no-automerge label all come from github>netresearch/renovate-config.

Dependabot security updates are unaffected. Those are a repository setting, not this file, and they stay on.

Part of a fleet-wide sweep for netresearch/.github#410, applied to the 78 non-mirror repositories where Renovate is demonstrably running and covers every ecosystem Dependabot declared. Two repositories were deliberately excluded because Renovate does not currently see an ecosystem Dependabot does: ldap-manager (gomod) and node-agent-skill-coordinator (github-actions).

Assisted by claude-code:claude-opus-5 — Session

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 1c5ed317-722e-4017-bac9-1bd8bec33467

📥 Commits

Reviewing files that changed from the base of the PR and between 48a0c0f and 6b7a156.

📒 Files selected for processing (1)

• .github/dependabot.yml

💤 Files with no reviewable changes (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The pull request deletes .github/dependabot.yml. This removes weekly Monday Dependabot updates for the github-actions and composer ecosystems, the limit of five open update pull requests, grouped dependency patterns, the seven-day cooldown, and related configuration comments.

Merge Risk: ⚪ Minimal · up to 6b7a1

Removing the redundant configuration should preserve dependency-update coverage through Renovate without introducing a merge-blocking production risk.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely states that the Dependabot configuration is being removed.
Description check	✅ Passed	The description explains why the Dependabot configuration is removed, confirms Renovate coverage, and states that security updates remain enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/remove-dependabot

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch chore/remove-dependabot

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[CybotTM]

Self-review: 6b7a156

The review this pull request demands is unsatisfiable (Copilot quota wall or repeated bot failures on this head). Per the documented fallback, the diff on this head was reviewed by the PR author; this comment is the on-the-record attestation the merge gate reads back. It stops matching on the next push.