chore(github-tag): pin tag devsecninja/ai-toolkit to 2491ced [automerge]

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
DevSecNinja/ai-toolkit	apm	pinDigest	→ 2491ced

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• New Features

  • Added configuration for GitHub Copilot and Microsoft Learn tool integrations.
  • Added support for Git-push approval workflows and related deployment tracking.

• Chores

  • Updated project tooling metadata and deployment records.
  • Pinned the AI toolkit dependency to a specific repository revision for more consistent builds.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: a12745be-cac0-4bd6-940e-f2ebefc8580a

📥 Commits

Reviewing files that changed from the base of the PR and between 3dd1973 and 16a2727.

📒 Files selected for processing (3)

• .github/mcp.json
• apm.lock.yaml
• apm.yml

Included review availability: Your plan provides up to 10 included reviews per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The PR pins the APM dependency to a commit, adds GitHub Copilot and Microsoft Learn MCP servers, and refreshes lock metadata for MCP targets, deployed files, and local approval hooks.

Changes

APM and MCP update

Layer / File(s)	Summary
APM dependency pin and lock metadata apm.yml, apm.lock.yaml	The dependency changes from the v0.8.0 tag to commit 2491cedec727e722a7751ff516ae7b7c95de922b. The lock metadata records APM version 0.31.0 and the updated generation data.
MCP configuration and deployment records .github/mcp.json, apm.lock.yaml	The configuration adds GitHub Copilot and Microsoft Learn HTTP MCP servers with wildcard tool access. The lockfile records both MCP targets and deployment metadata.
Local approval hook manifests apm.lock.yaml	The local deployment manifest and hash manifest include the Git-push approval hook and script alongside the existing tool-guardian entries.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 16a27

The dependency pin and MCP deployment metadata are internally consistent in the supplied evidence, with no established merge-blocking risk.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the main change: pinning the devsecninja/ai-toolkit tag to commit 2491ced. The automerge marker is also consistent with the stated objective.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/pin-dependencies

---

_{Comment @coderabbitai help to get the list of available commands.}