Onboard repository to Dependabot for automated testing and AI dependency updates

[Copilot]

• Explore repository structure and understand package management setup
• Confirm no existing Dependabot configuration exists
• Identify that the project uses Central Package Management with Directory.Packages.props
• Create .github/dependabot.yml configuration file
• Configure Dependabot to monitor NuGet packages
• Configure Dependabot to monitor GitHub Actions
• Set appropriate update intervals and grouping strategies
• Validate configuration syntax and structure
• Refactor to only update testing dependencies per maintainer feedback
• Remove documentation file per maintainer request
• Simplify configuration by removing redundant allow list
• Use wildcard patterns in ignore list for cleaner maintenance
• Add Microsoft.Extensions.AI group for lockstep updates
• Move AI group to top for prioritization

Summary

Successfully onboarded the repository to Dependabot for automated dependency updates, refined based on maintainer feedback to target testing dependencies plus critical Microsoft.Extensions.AI packages with optimal organization.

Latest Changes:

• Moved microsoft-extensions-ai group to top per @eiriktsarpalis feedback for prioritization
• Maintained proper pattern Microsoft.Extensions.AI.* for comprehensive AI package coverage
• Organized groups by priority - AI packages first, then testing frameworks

Final Configuration:

• NuGet Package Management: Monitors testing dependencies + Microsoft.Extensions.AI packages
• GitHub Actions Updates: Keeps workflow actions current and secure
• Smart Grouping: 6 focused groups prioritized by importance:
  1. microsoft-extensions-ai: All Microsoft.Extensions.AI.* packages for lockstep updates (TOP PRIORITY)
  2. testing-frameworks: xunit, Microsoft.NET.Test.Sdk, coverlet, Moq, etc.
  3. microsoft-extensions-testing: Microsoft.Extensions packages used in testing
  4. opentelemetry-testing: OpenTelemetry packages for testing/samples
  5. serilog-testing: Serilog packages for testing/samples
  6. other-testing: Individual testing packages
• Pattern-Based Filtering: Uses wildcards for clean ignores of other product dependencies
• Controlled Updates: Limited to 5 concurrent PRs
• Appropriate Labeling: PRs tagged with dependencies and testing

The configuration prioritizes Microsoft.Extensions.AI packages for immediate attention while maintaining comprehensive testing dependency management.

Fixes #799.

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.