From dabaf2552cedda5e5b92c38244075d2cce87c8ed Mon Sep 17 00:00:00 2001
From: G <41178744+catomean@users.noreply.github.com>
Date: Sat, 29 Aug 2026 08:22:51 +0200
Subject: [PATCH 1/3] chore: add a dependency watcher
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

23 of 30 repos in the fleet had none. The symptom looks like neglect and
is not: aoz-housing had 100 commits in August, features landing daily, and
was still on Next 14 / React 18 / Tailwind 3 — because nothing ever OPENED
the upgrade PR. Version drift here is the absence of a mechanism.

npm directory: /. Minor and patch grouped so the sweep spends one
cycle on them; majors stay separate because they deserve reading.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UvjGNAS9CMfEGNW26tUR4P
---
 .github/dependabot.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..a6464165
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,26 @@
+# Dependency updates, weekly.
+#
+# Added 2026-08-29 after a fleet audit found 23 of 30 repos had no watcher at
+# all. The symptom looked like neglect and was not: aoz-housing had 100 commits
+# that month and was still on Next 14, because nothing ever opened the PR.
+# Drift here is the absence of a mechanism, not the absence of attention.
+#
+# Minor and patch are grouped into one PR so the auto-merge sweep spends one
+# cycle on them instead of five; majors stay separate because they deserve to
+# be read.
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    groups:
+      minor-and-patch:
+        update-types: [minor, patch]
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 3

From 506a4675f739777fe2f58622d7c929e32f836f58 Mon Sep 17 00:00:00 2001
From: G <41178744+catomean@users.noreply.github.com>
Date: Sat, 29 Aug 2026 08:27:50 +0200
Subject: [PATCH 2/3] chore: format the watcher config for this repo prettier
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

botsmann is one of only three repos in the fleet whose verify runs
`prettier --check .`, and prettier checks YAML too — so the new
.github/dependabot.yml failed format:check while the identical file passed in
the other 22 repos.

Worth noting rather than just fixing: the formatter is not the odd one out
here. Three of thirty repos have any formatter at all. This repo caught a real
inconsistency the other twenty-seven could not have.

From 64bf00227b15f3eef2dde8f933e91c1e4bb72a54 Mon Sep 17 00:00:00 2001
From: G <41178744+catomean@users.noreply.github.com>
Date: Sat, 29 Aug 2026 08:28:57 +0200
Subject: [PATCH 3/3] chore: format the watcher config to this repo's prettier
 settings
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

botsmann is one of three repos in the fleet whose verify runs
`prettier --check .`, and prettier checks YAML — so the same dependabot.yml
that passed in 22 other repos failed here on quote style: .prettierrc sets
singleQuote, the file used double quotes.

The first fix attempt ran prettier WITHOUT the repo's config and reported no
changes, which looked like the file was already clean. A formatter run with
default settings does not answer whether a repo's formatter is satisfied.
---
 .github/dependabot.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a6464165..554fa373 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -11,7 +11,7 @@
 version: 2
 updates:
   - package-ecosystem: npm
-    directory: "/"
+    directory: '/'
     schedule:
       interval: weekly
     open-pull-requests-limit: 5
@@ -20,7 +20,7 @@ updates:
         update-types: [minor, patch]
 
   - package-ecosystem: github-actions
-    directory: "/"
+    directory: '/'
     schedule:
       interval: weekly
     open-pull-requests-limit: 3