ci: vouch dependabot[bot]

[nicktrn]

Dependabot's first auto-bump PR (#3495) was auto-closed because dependabot[bot] isn't in the vouch list and isn't exempt from the require-draft check.

Two changes:

• Add dependabot[bot] to .github/VOUCHED.td so the vouch check passes.
• Add dependabot[bot] to the require-draft exception in vouch-check-pr.yml (alongside devin-ai-integration[bot]) so its PRs aren't closed for being non-draft.

Without both, dependabot bumps will keep getting closed and we lose the weekly action update flow that #3494 set up.

[changeset-bot]

⚠️ No Changeset found

Latest commit: dddb4de

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 5b4ea3af-d5f6-4880-83aa-ec9565798090

📥 Commits

Reviewing files that changed from the base of the PR and between d825427 and dddb4de.

📒 Files selected for processing (2)

• .github/VOUCHED.td
• .github/workflows/vouch-check-pr.yml

📜 Recent review details

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (22)

• GitHub Check: units / internal / 🧪 Unit Tests: Internal (6, 8)
• GitHub Check: units / internal / 🧪 Unit Tests: Internal (8, 8)
• GitHub Check: units / webapp / 🧪 Unit Tests: Webapp (4, 8)
• GitHub Check: units / internal / 🧪 Unit Tests: Internal (1, 8)
• GitHub Check: units / webapp / 🧪 Unit Tests: Webapp (1, 8)
• GitHub Check: units / internal / 🧪 Unit Tests: Internal (2, 8)
• GitHub Check: units / webapp / 🧪 Unit Tests: Webapp (6, 8)
• GitHub Check: units / webapp / 🧪 Unit Tests: Webapp (7, 8)
• GitHub Check: units / internal / 🧪 Unit Tests: Internal (4, 8)
• GitHub Check: units / webapp / 🧪 Unit Tests: Webapp (2, 8)
• GitHub Check: units / webapp / 🧪 Unit Tests: Webapp (5, 8)
• GitHub Check: units / webapp / 🧪 Unit Tests: Webapp (8, 8)
• GitHub Check: units / webapp / 🧪 Unit Tests: Webapp (3, 8)
• GitHub Check: units / packages / 🧪 Unit Tests: Packages (1, 1)
• GitHub Check: e2e / 🧪 CLI v3 tests (windows-latest - npm)
• GitHub Check: e2e / 🧪 CLI v3 tests (windows-latest - pnpm)
• GitHub Check: sdk-compat / Bun Runtime
• GitHub Check: typecheck / typecheck
• GitHub Check: audit
• GitHub Check: Analyze (actions)
• GitHub Check: Analyze (python)
• GitHub Check: Analyze (javascript-typescript)

🔇 Additional comments (2)

.github/VOUCHED.td (1)

16-16: Good update to bot vouching list.

Adding dependabot[bot] here matches the intended CI behavior and should prevent false auto-closures from vouch checks.

.github/workflows/vouch-check-pr.yml (1)

31-32: Condition update is correct for Dependabot flow.

Excluding dependabot[bot] in require-draft aligns with the new vouch entry and avoids closing Dependabot PRs for non-draft status.

---

Walkthrough

This pull request adds dependabot[bot] to the vouched contributors list and modifies the draft PR validation workflow to exclude Dependabot-authored pull requests from the draft requirement check. The changes span two configuration files and are directly related to integrating Dependabot into the project's CI/CD workflow and contributor tracking.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The description provides clear context about the issue, explains both required changes, and includes rationale. However, it lacks the structured sections (Checklist, Testing, Changelog) specified in the template.	Add the missing template sections: completed checklist, testing steps, and changelog entry to fully conform to repository standards.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'ci: vouch dependabot[bot]' directly and concisely summarizes the main change: adding dependabot[bot] to the vouch configuration to prevent auto-closure of its PRs.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ci/vouch-dependabot

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Review rate limit: 7/8 reviews remaining, refill in 7 minutes and 30 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[nicktrn]

ready