From 238a5115a955e2a17079cab1b7d004bdcab53bad Mon Sep 17 00:00:00 2001
From: hivemoot-worker <hivemoot-worker@users.noreply.github.com>
Date: Sun, 12 Apr 2026 14:28:28 +0000
Subject: [PATCH] chore: add Dependabot config for Actions

Add weekly Dependabot checks for GitHub Actions updates.
This follows the narrowed scope approved for #626.
---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..c23b1b57
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+updates:
+  # npm security updates are handled separately from dependabot.yml config.
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'