John KennedyandGitHub 3c0b99f295 chore: update dependabot.yml to comply with posture checks (#7278) ...

## Summary

- Changes all 11 dependabot entries from `weekly` to `monthly` schedule
to reduce PR noise
- Removes `day: monday` (only valid for weekly cadence)
- Adds `update-types` split to every entry so breaking major upgrades
arrive in a separate PR from safe minor/patch updates

**Before:** one wildcard group, weekly, major and minor/patch mixed
together
**After:** two groups (`minor-and-patch` / `major`), monthly

## Test plan

- [x] Confirm dependabot picks up the new config (check Insights →
Dependency graph → Dependabot)
- [ ] Verify next scheduled run produces two grouped PRs per ecosystem
(minor+patch bundle, major bundle) rather than one-per-dep

🤖 Generated with [Claude Code](https://claude.com/claude-code)

2026-03-25 10:59:11 -07:00

..

actions/uv_setup

chore: extract reusable uv_setup composite action (#7262)

2026-03-24 00:25:58 -04:00

images

chore: new logos (#7002)

2026-03-02 11:59:44 -05:00

ISSUE_TEMPLATE

chore: extract reusable uv_setup composite action (#7262)

2026-03-24 00:25:58 -04:00

scripts

feat(cli): add keep_latest prune strategy to ThreadTTLConfig (#6784)

2026-02-11 19:00:48 -08:00

workflows

ci: SHA-pin all third-party GitHub Actions (#7277)

2026-03-25 10:58:38 -07:00

dependabot.yml

chore: update dependabot.yml to comply with posture checks (#7278)

2026-03-25 10:59:11 -07:00

PULL_REQUEST_TEMPLATE.md

chore: update templates (#7261)

2026-03-24 00:17:49 -04:00