From 9c080b7dd72e9a6da82f75392e43c108231d610e Mon Sep 17 00:00:00 2001
From: fOuttaMyPaint <154358121+TMHSDigital@users.noreply.github.com>
Date: Sat, 25 Apr 2026 17:51:35 -0400
Subject: [PATCH] chore: add github-actions ecosystem to dependabot coverage

The meta-repo lacked dependabot coverage for the github-actions
ecosystem, which is how the Node 20 deprecation accumulated silently
before DTD#18 surfaced it as a deadline-driven scramble.

Adds .github/dependabot.yml with weekly github-actions update checks.
Future deprecations will surface as PRs rather than needing manual
ecosystem audits. Especially relevant here: this repo ships the drift
checker that audits consumers but did not audit its own action
versions until now.

Closes #31.

Signed-off-by: 154358121+TMHSDigital@users.noreply.github.com
Made-with: Cursor
---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..5ace460
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"