[or-akl]

What

Adds .github/dependabot.yml so Dependabot opens a PR for every available dependency bump in this repo.

• Ecosystems detected: github-actions, maven, gradle
• Schedule: weekly
• open-pull-requests-limit: 100 so no update is held back
• GitHub's default 3-day cooldown on newly published versions is kept as a supply-chain safeguard

Why

Org-wide rollout of automated dependency update PRs across akeylesslabs, so every repo gets the same visibility into pending updates.

Tuning

If this repo needs packages bumped together, add a groups: block; to pin something, add ignore:. Directories were detected from the repo tree, so drop any entry that points at a non-deployed sample.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Added weekly automated dependency update checks for GitHub Actions and Java build tools.
  • Updates are submitted as pull requests, with a limit on the number kept open at once.

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{This review includes 1 billable file and costs up to $0.25.}

• Ask an admin to make reviews automatic

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Or wait 11 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used all 5 included reviews currently available. Your 15 included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.

Learn how review limits work.

Review configuration:

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: 502b06f4-cbff-4789-88c0-1258a20f88f6

Commits

Reviewing files that changed from the base of the PR and between 30884ef and 494d582.

Files selected for processing: 1

• .github/dependabot.yml

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: 0942f612-49f4-4aa3-8b53-54b67efb03b9

Commits

Reviewing files that changed from the base of the PR and between d69f903 and 30884ef.

Files selected for processing: 1

• .github/dependabot.yml

Included review availability: This review used your included allowance. 0 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.

Walkthrough

The repository now configures Dependabot to check GitHub Actions, Maven, and Gradle dependencies weekly. Each ecosystem uses the repository root and an open-pull-request limit of 100.

Changes: Dependency Updates

Layer / File(s)	Summary
Weekly update schedules .github/dependabot.yml	Adds weekly Dependabot version-update configuration for GitHub Actions, Maven, and Gradle. Each ecosystem uses / as its directory and has an open-pull-request limit of 100. Comments describe the update policy and management.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: Minimal · previous review 30884

The configured updates are ready to merge; no material update-coverage issue was established.

Pre-merge checks: 4 · 1

Failed checks: 1 inconclusive

Check name	Status	Explanation	Resolution
Title check		The title "chore: add Dependabot version updates for all package ecosystems" matches the main change, which adds .github/dependabot.yml with weekly Dependabot version-update checks. However, the title…	Narrow the title to match the configured ecosystems. For example: "chore: add Dependabot version updates for GitHub Actions, Maven, and Gradle". Alternatively, add the remaining package ecosystems to dependabot.yml if "all" is the intended …

Passed checks: 4 passed

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Title check

Explanation

The title "chore: add Dependabot version updates for all package ecosystems" matches the main change, which adds .github/dependabot.yml with weekly Dependabot version-update checks. However, the title says "all package ecosystems", but the file configures only github-actions, maven, and gradle. This overstates the scope. The title is partially related to the change: it names the right feature but claims broader coverage than the diff provides.

Resolution

Narrow the title to match the configured ecosystems. For example: "chore: add Dependabot version updates for GitHub Actions, Maven, and Gradle". Alternatively, add the remaining package ecosystems to dependabot.yml if "all" is the intended scope.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{I’m a rabbit checking bumps each week,
Three dependency trails I seek.
Actions, Maven, Gradle join the line,
Root paths set, schedules align.
A hundred open updates may appear,
I twitch my nose and hop from here.}

_{Comment @coderabbitai help to get the list of available commands.}