chore: regenerate gh-aw lock files with v0.76.1

.github/aw/actions-lock.json

@@ -5,10 +5,10 @@
       "version": "v9.0.0",
       "sha": "3a2844b7e9c422d3c10d287c895573f7108da1b3"
     },
-    "github/gh-aw-actions/setup@v0.72.1": {
+    "github/gh-aw-actions/setup@v0.76.1": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.72.1",
-      "sha": "bc56a0cad2f450c562810785ef38649c04db812a"
+      "version": "v0.76.1",
+      "sha": "46d564922b082d0db93244972e8005ea6904ee5f"
     }
   }
 }

.github/dependabot.yml

@@ -1,85 +1,64 @@
-version: 2
-
-# Dependabot configuration for git-ape.
-#
-# Strategy:
-# - Group the @docusaurus/* family into a single PR (they always release together).
-# - Group React + types together.
-# - Treat all other npm minor/patch as a single weekly PR to reduce noise.
-# - Keep major bumps separate so they can be reviewed individually (Docusaurus 3 -> 4 etc.).
-# - Bump GitHub Actions versions weekly, grouped, so workflow drift stays small.
-#
-# Notes:
-# - There is only one package.json in this repo (under /website), so npm ecosystem
-#   is scoped to that directory.
-# - Dependabot security alerts run independently of this file; this config covers
-#   version updates only.
-
 updates:
-  # ---------------------------------------------------------------------------
-  # npm — Docusaurus website
-  # ---------------------------------------------------------------------------
-  - package-ecosystem: "npm"
-    directory: "/website"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-      timezone: "Etc/UTC"
-    open-pull-requests-limit: 5
-    labels:
-      - "dependencies"
-      - "website"
-    commit-message:
-      prefix: "deps(website)"
-      include: "scope"
-    groups:
-      docusaurus:
-        patterns:
-          - "@docusaurus/*"
-          - "docusaurus-*"
-        update-types:
-          - "minor"
-          - "patch"
-      react:
-        patterns:
-          - "react"
-          - "react-dom"
-          - "@types/react"
-        update-types:
-          - "minor"
-          - "patch"
-      website-minor-patch:
-        patterns:
-          - "*"
-        exclude-patterns:
-          - "@docusaurus/*"
-          - "docusaurus-*"
-          - "react"
-          - "react-dom"
-          - "@types/react"
-        update-types:
-          - "minor"
-          - "patch"
-
-  # ---------------------------------------------------------------------------
-  # GitHub Actions — workflow runners
-  # ---------------------------------------------------------------------------
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-      timezone: "Etc/UTC"
-    open-pull-requests-limit: 3
-    labels:
-      - "dependencies"
-      - "github-actions"
-    commit-message:
-      prefix: "deps(actions)"
-      include: "scope"
-    groups:
-      github-actions:
-        patterns:
-          - "*"
+- commit-message:
+    include: scope
+    prefix: deps(website)
+  directory: /website
+  groups:
+    docusaurus:
+      patterns:
+      - "@docusaurus/*"
+      - docusaurus-*
+      update-types:
+      - minor
+      - patch
+    react:
+      patterns:
+      - react
+      - react-dom
+      - "@types/react"
+      update-types:
+      - minor
+      - patch
+    website-minor-patch:
+      exclude-patterns:
+      - "@docusaurus/*"
+      - docusaurus-*
+      - react
+      - react-dom
+      - "@types/react"
+      patterns:
+      - "*"
+      update-types:
+      - minor
+      - patch
+  labels:
+  - dependencies
+  - website
+  open-pull-requests-limit: 5
+  package-ecosystem: npm
+  schedule:
+    day: monday
+    interval: weekly
+    time: "06:00"
+    timezone: Etc/UTC
+- commit-message:
+    include: scope
+    prefix: deps(actions)
+  directory: /
+  groups:
+    github-actions:
+      patterns:
+      - "*"
+  ignore:
+  - dependency-name: "github/gh-aw-actions/**" # Managed by gh aw compile. Version-locked to the gh-aw compiler; do not bump.
+  labels:
+  - dependencies
+  - github-actions
+  open-pull-requests-limit: 3
+  package-ecosystem: github-actions
+  schedule:
+    day: monday
+    interval: weekly
+    time: "06:00"
+    timezone: Etc/UTC
+version: 2

.github/workflows/git-ape-actionlint.yml

@@ -22,4 +22,15 @@ jobs:
           # Download the official actionlint binary into the workspace.
           bash <(curl --silent --show-error --fail \
             https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
-          ./actionlint -color
+          # Exclude gh-aw compiler output (*.lock.yml under .github/workflows).
+          # Those files are generated by `gh aw compile` and their contents are
+          # the responsibility of the gh-aw compiler, not this repo.
+          mapfile -t WORKFLOW_FILES < <(
+            find .github/workflows -type f \( -name '*.yml' -o -name '*.yaml' \) \
+              ! -name '*.lock.yml'
+          )
+          if [ "${#WORKFLOW_FILES[@]}" -eq 0 ]; then
+            echo "No workflow files to lint."
+            exit 0
+          fi
+          ./actionlint -color "${WORKFLOW_FILES[@]}"