Configure Dependabot to monitor @github/copilot npm updates

[edburns]

• Add npm ecosystem entry for scripts/codegen/ directory
• Filter to @github/copilot package only (daily schedule)
• Add github-actions ecosystem entry for workflow updates (weekly)

Related to #93 .

Before the change?

• There is no agentic way to keep the generated code in sync with the reference implementation.

After the change?

• This way exists.

Pull request checklist

• Tests for the changes have been added (for bug fixes / features)
• Docs have been reviewed and added / updated if needed (for bug fixes / features)
• mvn spotless:apply has been run to format the code
• mvn clean verify passes locally

Does this introduce a breaking change?

• Yes
• No infrastructure only.

---

[edburns]

@copilot

I already did this locally.

Ran terminal command: pip3 install --quiet check-jsonschema && check-jsonschema --schemafile /tmp/dependabot-2.0-schema.json .github/dependabot.yml
Completed with input: pip3 install --quiet check-jsonschema && check-jsonschema --schemafile /tmp/dependabot-2.0-schema.json .github/dependabot.yml

Ran terminal command: /Users/edburns/Library/Python/3.9/bin/check-jsonschema --schemafile /tmp/dependabot-2.0-schema.json .github/dependabot.yml

Validation passed. The dependabot.yml is valid against the official schema. Safe to merge to main.

[Copilot]

Pull request overview

Configures Dependabot to automatically track upstream dependency updates relevant to keeping the SDK’s generated code and workflows in sync with the reference implementation.

Changes:

• Add a Dependabot npm update configuration for /scripts/codegen on a daily schedule.
• Restrict npm updates to the @github/copilot package and limit open PRs to 1.
• Add a weekly Dependabot configuration for github-actions updates.

Show a summary per file

File	Description
.github/dependabot.yml	Adds Dependabot update entries for npm codegen dependencies and GitHub Actions workflow versions.

Copilot's findings

• Files reviewed: 1/1 changed files
• Comments generated: 0