lean-poker / boardgame.io / 25956971810

100%

push

github

ci: add dependabot config and security-update auto-merge (#22)

Surface third-party advisories automatically and let patch/minor
updates (including security fixes) land without manual review.

- .github/dependabot.yml: weekly npm + github-actions updates,
  npm minor+patch grouped into one PR to reduce review noise.
- .github/workflows/dependabot-auto-merge.yml: approves and enables
  GitHub auto-merge on dependabot PRs that are semver-patch or
  semver-minor (regular or security). Major bumps stay manual.
- dependabot/fetch-metadata pinned to v2.5.0
  (21025c705).

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

1786 of 1789 branches covered (99.83%)

Branch coverage included in aggregate %.

2669 of 2673 relevant lines covered (99.85%)

28598.68 hits per line