TEST & SECURE: Dependabot

8.1 — Enable Dependabot

1. Repository Settings → Security and quality → Advanced Security
2. Dependabot section:
   • Enable Dependency graph (prerequisite for Dependabot)
   • Enable Dependabot security updates
   • Enable Dependabot version updates → an editor opens with a .github/dependabot.yml template
3. Change package-ecosystem: "" in the template to "npm" (this repo uses the pnpm / npm ecosystem). The final file should look like this:

version: 2
updates:
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"

4. Commit changes… → choose "Create a new branch and start a pull request" → open the PR and merge it