Problem
Dependencies are never automatically updated. Known vulnerabilities may go undetected.
Scope
Add .github/dependabot.yml for weekly updates across all ecosystems.
Acceptance criteria
- npm: weekly updates for
backend/ and frontend/
- Cargo: weekly updates for
contracts/
- Minor/patch updates grouped into one PR per ecosystem
- PRs auto-assigned to maintainer
Complexity: Easy · 50 points
Problem
Dependencies are never automatically updated. Known vulnerabilities may go undetected.
Scope
Add
.github/dependabot.ymlfor weekly updates across all ecosystems.Acceptance criteria
backend/andfrontend/contracts/Complexity: Easy · 50 points