From c005e22154353a6e47420eb64748126f64b3482c Mon Sep 17 00:00:00 2001
From: nothingnesses <18732253+nothingnesses@users.noreply.github.com>
Date: Tue, 26 May 2026 11:24:24 +0100
Subject: [PATCH 1/2] chore: add frontend dependency updates

Configure Dependabot to update frontend pnpm dependencies under /frontend weekly.

Group frontend package updates into a single PR so CI validates package.json and pnpm-lock.yaml together.
---
 .github/dependabot.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..31b6ea7
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,13 @@
+version: 2
+
+updates:
+  - package-ecosystem: "npm"
+    directory: "/frontend"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "07:00"
+    groups:
+      frontend-dependencies:
+        patterns:
+          - "*"

From 6843415b5d71d2ec071be3608dd846e181eca777 Mon Sep 17 00:00:00 2001
From: nothingnesses <18732253+nothingnesses@users.noreply.github.com>
Date: Tue, 26 May 2026 11:24:56 +0100
Subject: [PATCH 2/2] chore: add workflow dependency updates

Configure Dependabot to update GitHub Actions versions weekly.

Group workflow action updates into a single PR.
---
 .github/dependabot.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 31b6ea7..4819d39 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -11,3 +11,14 @@ updates:
       frontend-dependencies:
         patterns:
           - "*"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "07:00"
+    groups:
+      github-actions:
+        patterns:
+          - "*"