ci: add Dependabot version updates

[BenDaSpur]

Adds weekly Dependabot version updates, using the same schedule and grouping as studio.

Ecosystems

• npm at / (package.json and package-lock.json). Minor and patch updates are grouped into production and development pull requests. Major updates stay individual.
• GitHub Actions at /. All action bumps in a week are grouped.

Checks run Mondays at 09:00 UTC. Open pull request limits are 10 for npm and 5 for Actions.

The dependencies and github-actions labels match studio. They are not created on this repo yet, so Dependabot skips them until those labels exist.

  

Summary by CodeRabbit

• Chores
  • Added weekly automated checks for application packages and workflow actions. Proposed updates are grouped and capped to keep maintenance changes manageable and consistent. These updates affect project maintenance workflows; no changes to app functionality are included.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: QAStudio-Dev/mcp-server/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: e1612661-3832-4636-9fc2-bcea43703129

📥 Commits

Reviewing files that changed from the base of the PR and between 9a3001c and b7d13fb.

📒 Files selected for processing (1)

• .github/dependabot.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• QAStudio-Dev/studio (manual)
• QAStudio-Dev/playwright-reporter (manual) → reviewed against open PR #7 cursor/setup-dependabot-83a2 instead of the default branch
• QAStudio-Dev/playwright-reporter-python (manual) → reviewed against open PR #3 cursor/setup-dependabot-83a2 instead of the default branch

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

Added Dependabot configuration for npm packages and GitHub Actions. Both ecosystems run weekly on Mondays at 09:00 UTC and use separate pull request limits, labels, commit prefixes, and grouping rules.

Changes

Dependency updates

Layer / File(s)	Summary
Configure ecosystem update schedules .github/dependabot.yml	Dependabot checks npm packages weekly, limits open pull requests to 10, and groups minor and patch updates by dependency type. GitHub Actions checks run weekly with a limit of 5 pull requests and one group for action updates.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to b7d13

Weekly dependency updates remain enabled, and missing labels do not prevent update pull requests. No actionable merge risk remains.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: adding Dependabot version updates through CI configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Monday brings the update queue
npm packages gather in groups
Actions follow their weekly route
Labels mark each pull request
Commit prefixes name the work
Two schedules keep their time in UTC}

_{Comment @coderabbitai help to get the list of available commands.}