chore: Dependabot monthly intervals + ecosystem coverage fixes

[Matt (matt-evervault)]

Why

Standardize Dependabot update cadence to reduce PR noise. All interval values in .github/dependabot.yml are changed from weekly to monthly (bundler and github-actions ecosystems).

How

Edited .github/dependabot.yml, changing only the interval: fields. Nothing else in the file was modified.

Ecosystem check

• bundler, directory /: matches — Gemfile present at repo root.
• github-actions, directory /: matches — workflow files present under .github/workflows/ (e2e.yml, linters.yml, release.yml, run-tests.yml).
• No configured directories are missing.
• Manifest present with no configured ecosystem: package.json and pnpm-lock.yaml exist at the repo root (npm ecosystem) but there is no corresponding package-ecosystem: npm entry in dependabot.yml. Flagged for awareness only — not changed in this PR.
• No other manifest types found (no Cargo.toml, go.mod, requirements.txt/pyproject.toml, composer.json, pom.xml/build.gradle, Package.swift, Dockerfile, or *.tf).

Ecosystem fixes

• Added a missing npm ecosystem entry (directory: '/', interval: monthly) — the root package.json and pnpm-lock.yaml were previously uncovered by Dependabot, as flagged above.

[ev-vaultkeeper]

Vaultkeeper Commands

Mention @ev-vaultkeeper <command> in a PR review thread:

• review — Review this PR and leave a review.
• address-comments — Push commits that address the review feedback on this PR.
• fix-ci — Investigate the failing CI on this PR and push a fix.

You can also request evervault-dependencies as a reviewer to trigger a review.

[changeset-bot]

⚠️ No Changeset found

Latest commit: ba52bf1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR