[luapmartin]

Resolves: N/A

Add a Dependabot config so the GitHub Actions used by the workflows get version-bump PRs automatically (weekly, grouped into a single PR). Same file as MuseScore's .github/dependabot.yml; audacity/audacity#12199 and musescore/muse_deps#51 add it to the other repos. The reusable workflows referenced at @master / @main in pr_dispatch.yml are branch refs, which Dependabot leaves alone.

• I signed the CLA
• The title of the PR describes the problem it addresses.
• Each commit's message describes its purpose and effects, and references the issue it resolves. If changes are extensive, there is a sequence of easily reviewable commits.
• The code in the PR follows the coding rules.
• I understand all aspects of the code I'm contributing and I'm able to explain it if requested.
• The code compiles and runs on my machine, preferably after each commit individually. I have manually tested and verified that my changes fulfil their intended purpose.
• No prior attempts to resolve this problem exist, or if they do, I listed them in my PR description and described how I avoided repeating past mistakes.
• There are no unnecessary changes.
• I created a unit test or vtest to verify the changes I made (if applicable).

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 4dc32280-faca-4ab8-b1d3-0a3aa7e30488

📥 Commits

Reviewing files that changed from the base of the PR and between 8c2f77a and 9546d43.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

Added .github/dependabot.yml. The configuration targets the GitHub Actions ecosystem at the repository root, checks for updates weekly, and groups all action updates into one pull request.

Priority: ⬇️ Low

Merge Risk: ⚪ Minimal · up to 9546d

This configuration only enables scheduled, grouped Dependabot updates and presents no material merge risk.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly and concisely describes the main change: adding a Dependabot configuration for GitHub Actions.
Description check	✅ Passed	The description explains the purpose, update schedule, grouping behavior, and branch-reference exception. It includes the required checklist, with the test item correctly left unchecked because this c…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}