chore(ci): schedule Dependabot updates

[fbosch]

Summary

Replace the failing scheduled audit workflow with daily Dependabot npm updates and update compatible dependencies to clear the CI audit failure.

Changes

• Add daily npm Dependabot updates and remove the standalone Audit workflow.
• Update direct dependencies within their existing major versions.
• Pin brace-expansion to the patched version required by the audit.
• Update the README badge and Biome configuration.

Testing

• pnpm audit --audit-level=high
• pnpm lint
• pnpm typecheck
• pnpm test
• pnpm build
• pnpm size

All remaining outdated direct dependencies require a major version update and are intentionally excluded.

[coderabbitai]

📝 Walkthrough

Walkthrough

Adds daily npm dependency updates through Dependabot, removes the audit workflow, and adds a CI workflow status badge to the README.

Changes

Repository maintenance

Layer / File(s)	Summary
Dependabot update schedule .github/dependabot.yml	Adds a daily Dependabot configuration for npm dependencies in the repository root.
CI status visibility README.md	Adds a GitHub Actions badge for the ci.yml workflow.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: copilot

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the main change: adding scheduled Dependabot npm updates.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/dependabot-updates

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

npx https://pkg.pr.new/docs-cache@53

commit: 021d95c

[Copilot]

Pull request overview

This PR updates the repository’s dependency maintenance approach by switching from a scheduled standalone audit workflow to daily Dependabot npm updates, while keeping dependency audit checks within the main CI workflow. It also updates the README badge to reflect the remaining workflow users should monitor.

Changes:

• Add a daily Dependabot configuration for npm dependencies.
• Remove the scheduled Audit GitHub Actions workflow.
• Update the README Actions badge to point to the CI workflow.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
README.md	Updates the Actions badge link from the removed audit workflow to ci.yml.
.github/workflows/audit.yml	Removes the scheduled/dispatch audit workflow now that audits are covered by CI.
.github/dependabot.yml	Adds daily Dependabot npm updates from the repository root.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[fbosch]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 021d95cb4d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".