extra hardening

[eviltester]

closes #85
closes #86

Summary by CodeRabbit

• Chores
  • Updated repository code ownership configuration.
  • Added automated weekly dependency update management for npm packages and GitHub Actions workflows, including pull request limits and dependency grouping.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: ca8c76fc-de2e-4008-9aa7-5abf4e89a896

📥 Commits

Reviewing files that changed from the base of the PR and between 3b4678d and 6ea7e65.

📒 Files selected for processing (2)

• .github/CODEOWNERS
• .github/dependabot.yml

---

📝 Walkthrough

Walkthrough

Repository governance and dependency automation are configured by adding a CODEOWNERS file that designates @eviltester as the default owner for all files, and a Dependabot configuration that automates weekly dependency update pull requests for npm and github-actions with intelligent grouping and reviewer assignment.

Changes

Repository Automation Setup

Layer / File(s)	Summary
Code ownership configuration .github/CODEOWNERS	CODEOWNERS designates @eviltester as the default owner for all repository files.
Dependency update automation .github/dependabot.yml	Dependabot configuration enables weekly automated dependency updates for npm (with 10 PR limit, semver cooldown, and grouped patterns for eslint, types, testing frameworks, and babel) and github-actions (with catch-all grouping), both assigned to @eviltester for review.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A rabbit hops through config files with glee,
CODEOWNERS marked and Dependabot set free,
Weekly updates grouped with wisdom so clear,
Automation blooms in the spring atmosphere! 🌱✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'extra hardening' is vague and generic, using non-descriptive terminology that doesn't convey meaningful information about the specific changes made to CODEOWNERS and dependabot configuration.	Consider a more specific title like 'Configure dependabot and add codeowners' that clearly describes what is being hardened and what changes are included in the pull request.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check	✅ Passed	The pull request successfully implements the requirements from both linked issues: configuring Dependabot with weekly update schedules and automatic PR management (#85), and adding a CODEOWNERS file assigning default ownership to @eviltester (#86).
Out of Scope Changes check	✅ Passed	All changes are directly aligned with the linked issues: CODEOWNERS assignment addresses #86, and Dependabot configuration addresses #85. No extraneous or unrelated changes are present.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch 85-configure-dependabot

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Adds repository hardening configuration: a Dependabot manifest for weekly npm and GitHub Actions updates (with grouping, labels, reviewers, and cooldown windows) and a CODEOWNERS file assigning default ownership of all files to @eviltester. Closes #85 and #86.

Changes:

• Add .github/dependabot.yml configuring npm and github-actions ecosystems with grouped updates and reviewer assignment.
• Add .github/CODEOWNERS assigning @eviltester as the default owner.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/dependabot.yml	Configures weekly Dependabot updates for npm and GitHub Actions, with groups, labels, reviewers, and cooldown windows.
.github/CODEOWNERS	Sets @eviltester as the default code owner for all files.