chore: remove Dependabot version-update config

[sambai-dev]

Dependabot version-update PRs fail by default here (pinned crypto deps, Tier/evidence description gate), so this deletes .github/dependabot.yml outright. Updates go through deliberate maintainer bumps instead.

Contribution tier

Tier A (repository automation configuration; no product code).

Declared scope

Delete .github/dependabot.yml.

Changes

• No new Dependabot version-update PRs on any ecosystem.
• Security alerts still come from the dependency graph; CI RustSec scan unchanged.

Validation

• Single-file deletion; nothing references the removed config.
• Reversible by restoring the file.

Safety and compatibility

No product, API, or dependency change. Existing open bot PRs are unaffected. Rollback is restoring the file.

Summary by CodeRabbit

• Chores
  • Removed automated weekly dependency update checks.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: sambai-dev/rookhold/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 4331e08a-6702-49ad-b95c-7828c5b73356

📥 Commits

Reviewing files that changed from the base of the PR and between a4ea413 and 56478fa.

📒 Files selected for processing (1)

• .github/dependabot.yml

💤 Files with no reviewable changes (1)

• .github/dependabot.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (4)

• GitHub Check: RustSec advisory scan
• GitHub Check: rust tests (windows-2025)
• GitHub Check: Linux containment (must run)
• GitHub Check: container and private rootfs

---

Walkthrough

The pull request removes the Dependabot configuration for Cargo, npm, Docker, and GitHub Actions, including weekly schedules, pull request limits, and a Cargo update group.

Changes

Dependabot configuration

Layer / File(s)	Summary
Remove update configuration .github/dependabot.yml	Removes weekly update schedules and pull request limits for Cargo, npm, Docker, and GitHub Actions. Also removes the Cargo minor-and-patch update group.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 56478

This change intentionally stops automated version-update PRs. No actionable merge-blocking issue is established.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: removal of the Dependabot version-update configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}