ci: add Dependabot version updates

[BenDaSpur]

Adds weekly Dependabot version updates, using the same schedule and grouping as studio.

Ecosystems

• pip at / (pyproject.toml and requirements-dev.txt). Minor and patch updates are grouped into production and development pull requests. Major updates stay individual.
• pip at /examples/playwright_tests (requirements.txt). Minor and patch updates for the example project are grouped.
• GitHub Actions at /. All action bumps in a week are grouped.

Checks run Mondays at 09:00 UTC. Open pull request limits are 10 for the package, 5 for the example project, and 5 for Actions.

The dependencies and github-actions labels match studio. They are not created on this repo yet, so Dependabot skips them until those labels exist.

  

Summary by CodeRabbit

• Chores
  • Configured weekly automated dependency update pull requests for Python packages and GitHub Actions.
  • Applied separate update limits, grouping, labels, and commit prefixes for each dependency source.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: QAStudio-Dev/playwright-reporter-python/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 4a7d65c8-39c9-4dbb-a41e-73b1c9316c3c

📥 Commits

Reviewing files that changed from the base of the PR and between e53f7f8 and b3c8ea0.

📒 Files selected for processing (1)

• .github/dependabot.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• QAStudio-Dev/studio (manual)
• QAStudio-Dev/playwright-reporter (manual) → reviewed against open PR #7 cursor/setup-dependabot-83a2 instead of the default branch
• QAStudio-Dev/mcp-server (manual) → reviewed against open PR #4 cursor/setup-dependabot-83a2 instead of the default branch

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

Adds weekly Dependabot v2 configuration for root and example Python dependencies and GitHub Actions. The configurations set update limits, labels, commit prefixes, and dependency grouping rules.

Changes

Dependabot updates

Layer / File(s)	Summary
Python dependency update policies .github/dependabot.yml	Root pip updates have a 10-PR limit and separate production and development groups. Playwright example pip updates have a 5-PR limit and one group for minor and patch updates. Both run weekly and use the dependencies label and chore commit prefix.
GitHub Actions update policy .github/dependabot.yml	GitHub Actions updates have a 5-PR limit and one group matching all actions. Updates run weekly and use the dependencies and github-actions labels and ci commit prefix.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to b3c8e

The configuration is ready for normal checks. Confirm the root dependency grouping when Dependabot first runs; the missing labels and their effect are already documented.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: adding Dependabot version update configuration for CI-related dependencies.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Monday morning, updates begin
Python packages gather in groups
Actions join the weekly queue
Labels mark each changing set
Small limits keep the list in view}

_{Comment @coderabbitai help to get the list of available commands.}