[temper] Configuration update

[temper-pulseengine]

Automated configuration update from the Temper bot.

Review the changes and merge if they match the org standard.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[avrabe]

Hygiene triage

This PR has been sitting since 2026-04-26. Two failures:

1. Playwright E2E — almost certainly an unrelated flake. A change to .github/dependabot.yml cannot affect frontend E2E tests. Re-running CI should clear it.

2. .github/dependabot.yml validation (dependabot-api.githubapp.com) — this is dependabot's own config validation. Likely culprit: the YAML anchor + alias (labels: &ref_0 / labels: *ref_0) is technically valid YAML 1.2 but some dependabot validators choke on it. Replacing with explicit labels: [dependencies] blocks would resolve it.

The config itself is sensible (weekly updates for github-actions + 5 cargo crates + 8 npm packages). Substantively merge-worthy.

Suggested actions (your call):

• Re-run CI to confirm Playwright is a flake, replace the YAML alias with explicit lists, and merge.
• Or close this PR; the temper bot will likely re-propose with the same content next cycle, at which point the same fix applies.

Not closing unilaterally because this is a bot-managed PR and the policy implications are yours to set.