chore: add Dependabot configuration for automated dependency updates

[chernojagne]

What type of PR is this? (check all applicable)

• Refactor
• Feature
• Bug Fix
• Optimization
• Documentation Update
• Other

Description

Add a Dependabot configuration to automate dependency updates for the pip, pre-commit, and github-actions ecosystems.

Dependabot will open PRs when new versions of pinned dependencies are available. The configuration uses a weekly schedule and groups updates into fewer PRs to reduce noise.

This change was generated by Autar and reviewed by a human before submission.

Related Issues

• Closes #

PR checklist

Before submitting this pull request, I have done the following:

• Read the contributing guidelines
• Ran tox and pre-commit checks locally
• Added my changes to the CHANGES file

Added/updated tests?

Current repository has 100% test coverage.

• Yes
• No, and this is why: Dependabot configuration is a .github/ metadata file with no testable runtime behavior.
• I need help with writing tests

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit e2c8b0c. Configure here.}

[cursor]

Missing trailing newline fails pre-commit check

Medium Severity

The new .github/dependabot.yml ends without a final newline. Since the CI linting job runs pre-commit run --all-files, which includes the end-of-file-fixer hook, this file will be flagged and the lint job will fail until the newline is added.

 

^{Reviewed by Cursor Bugbot for commit e2c8b0c. Configure here.}

[chernojagne]

Good catch — fixed in 442754f. Added the trailing newline so end-of-file-fixer will pass.