dependabot update freq

[SuperCoolPencil]

• remove unused workflow for dependabot automerge
• change dependabot freq to weekly instead of daily

Summary by CodeRabbit

• Chores
  • Dependency update checks for Go modules and the browser extension now run weekly instead of daily.
  • Automatic merging of eligible patch and minor dependency updates has been removed.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Advanced

Run ID: 27143271-ce25-4e07-a97c-2f591f0a1c7d

📥 Commits

Reviewing files that changed from the base of the PR and between ce77b5d and 8c935e1.

📒 Files selected for processing (2)

• .github/dependabot.yml
• .github/workflows/dependabot-auto-merge.yml

💤 Files with no reviewable changes (1)

• .github/workflows/dependabot-auto-merge.yml

Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 7 remain after this review.

---

📝 Walkthrough

Walkthrough

Dependabot checks for Go modules and npm now run weekly. The workflow that enabled auto-merge for patch and minor Dependabot updates was removed.

Changes

Dependabot policy

Layer / File(s)	Summary
Update and merge policy .github/dependabot.yml, .github/workflows/dependabot-auto-merge.yml	The Go module and npm update schedules changed from daily to weekly. The workflow that enabled auto-merge for patch and minor updates was removed.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 8c935

Dependabot updates will run weekly, and qualifying updates will no longer auto-merge. These match the stated policy changes, with no concrete merge-blocking issue identified.

Architecture Summary

Architecture risk: 🔵 Low · up to 8c935

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

• observed — Modified behavior in .github/dependabot.yml: Both Dependabot update schedules change from daily to weekly: the gomod updates at / and the npm updates at /extension.
• observed — Modified behavior in .github/workflows/dependabot-auto-merge.yml: The workflow that fetched Dependabot metadata and enabled auto-merge for bot pull requests with semver patch or minor updates was removed.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title identifies the main change to Dependabot update frequency. It is concise and related to the pull request, although it does not mention removal of the unused auto-merge workflow.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}