From a9878d0632840552f15654af9063786e451a61d9 Mon Sep 17 00:00:00 2001
From: david morales <118213696+davidmoralesz@users.noreply.github.com>
Date: Fri, 9 Oct 2026 14:43:23 -0600
Subject: [PATCH] chore(deps): cut Dependabot and lint runs

Sync with project-template v0.3.2 (Dependabot monthly, capped at 3 open PRs) and
drop lint's push and merge_group triggers: every change reaches main through a
pull request that already ran the hooks.
---
 .github/dependabot.yml     | 5 ++++-
 .github/workflows/lint.yml | 5 ++---
 .template-version          | 2 +-
 CONTRIBUTING.md            | 4 ++++
 4 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 20654dc..19c94ff 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,8 +3,11 @@ updates:
   # >>> template:base
   - package-ecosystem: github-actions
     directory: /
+    # Monthly: every update run, and every rebase of an open PR, is a billed Actions run
+    # on a private repository. Security updates ignore the schedule.
     schedule:
-      interval: weekly
+      interval: monthly
+    open-pull-requests-limit: 3
     cooldown:
       default-days: 7
     commit-message:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 97236de..2277cb2 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -1,10 +1,9 @@
 name: Lint
 
+# No `push` or `merge_group` trigger: every change reaches main through a pull request that
+# already ran these hooks, and the repository has no merge queue.
 on:
-  push:
-    branches: [main]
   pull_request:
-  merge_group:
 
 permissions: {}
 
diff --git a/.template-version b/.template-version
index 937cd78..7becae1 100644
--- a/.template-version
+++ b/.template-version
@@ -1 +1 @@
-v0.3.1
+v0.3.2
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 315c07f..42ec64d 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -90,6 +90,10 @@ markers, are kept in step with `studiobimo/project-template`. Change them there,
 `make -C .devtools sync` brings the change in. `make -C .devtools drift` shows what differs, and a
 weekly workflow opens an issue when something does. A deliberate difference goes in
 `.template-ignore`, with a comment saying why.
+
+Projects only receive a change at a release, and release-please releases only `fix`, `feat` and
+breaking commits. A change to a managed file titled `chore`, `docs` or `ci` merges but never reaches
+`sync`, so title it `fix` or `feat`.
 <!-- <<< template:workflow -->
 
 ### One pack per pull request