ci: add dependabot validation workflow

[AnzalKhan16]

What does this PR do?

This PR introduces a GitHub Actions workflow (dependabot-validation.yml) to automatically validate pull requests opened or updated by Dependabot. It ensures that dependency updates are safe by running the project's standard checks:

• Verifies the PR author is dependabot[bot].
• Checks out the repository and sets up Node.js with npm cache.
• Installs dependencies and runs linting, unit tests, and build verification.
• Automatically uploads logs as artifacts if any of the checks fail to assist with debugging.
• Operates with the minimum required permissions (contents: read).

Type of change

• New agent
• Bug fix
• UI improvement
• Documentation
• Other (CI/CD automation)

Checklist

• I ran npm run build locally and it passed ✅
• I tested my changes in the browser ✅
• I did not break any existing agents ✅
• I did not use import agents from '../agents/registry' ✅
• My PR has a clear description above ✅

Screenshots (if UI change)

N/A - CI/CD workflow change only.

fixes #909

[vercel]

@AnzalKhan16 is attempting to deploy a commit to the aditthyass' projects Team on Vercel.

A member of the Team first needs to authorize it.

[coderabbitai]

Warning

Review limit reached

@AnzalKhan16, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 55 minutes

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 5480e168-2517-41e8-b676-b96e61894c33

📥 Commits

Reviewing files that changed from the base of the PR and between 6e954bd and 96af13b.

📒 Files selected for processing (1)

• .github/workflows/dependabot-validation.yml

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)

Validation error: Unrecognized key: "issues"

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[mergify]

hey @AnzalKhan16! 👋
Your PR title doesn't follow our required format.
Please update it to:
type: short description
Valid types: feat, fix, docs, style, refactor, test, chore
Example: feat: add sales discovery agent
— @AditthyaSS

[mergify]

⚠️ This branch is out of date with main.
Please click "Update branch" to sync before merging.