Automate safe Dependabot updates

[exekias]

Summary

• group framework, development, production, and security dependency updates
• enable native auto-merge for security patch/minor, development patch/minor, and production/indirect patch updates
• keep production minor and all major updates manual
• pin the Dependabot metadata action to an immutable commit and avoid executing PR code

Repository settings

• GitHub native auto-merge is enabled
• the active main ruleset requires the latest check status before merging

Validation

• npm run lint
• npm run lessons:validate (43/43)
• npx tsc --noEmit
• npm run build
• YAML parsing and git diff --check

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
learn-postgres	Ready	Preview	Sep 9, 2026 10:12am UTC