TECH_DEBT: Removing Dependabot.yml github action

[kissalk]

Updating Security.MD

🛠️ Description of Changes

Please provide a high-level overview of the changes included in this PR.

🧪 Testing Performed

Please describe the testing that was performed on the changes included in this PR.

🧑‍🔬 Unit Testing

• I have written or updated unit tests to cover my changes

📓 Documentation Updated

Please update any relevant sections in the project documentation that were impacted by the changes in the PR.

Summary by CodeRabbit

• Chores
  • Dependency management configuration updated to use Snyk.io instead of Dependabot for automated dependency updates.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

📝 Walkthrough

Walkthrough

This PR removes the Dependabot configuration file and updates the SECURITY.md documentation to reference Snyk.io instead. The changes transition dependency management from Dependabot to Snyk.io while removing associated automated update workflows.

Changes

Cohort / File(s)	Summary
Dependency Management Configuration .github/dependabot.yml	Entire file deleted; removed npm and docker package ecosystem update workflows with weekly scheduling, custom grouping rules (security_updates, version_updates), assignees, labels, and commit message prefixes
Security Documentation SECURITY.md	Updated dependency management reference from "Dependabot" to "Snyk.io"

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• LNK-3290: Introduce new dependabot.yml file that implements scheduled updates to packages in our repocopy over depenabot.yml file from original branch via squash merge #614 — Inverse change: previously added the .github/dependabot.yml file that this PR removes
• TECH_DEBT: Update CODEOWNERS and dependabot.yml with groups instead of individuals #1072 — Modified the same Dependabot configuration file by replacing individual assignees with a group assignment
• TECH_DEBT: Update support for auto-including reviewers for dependabot PRs, and a new PR label to highlight DB changes #854 — Related dependency-management configuration changes including edits to .github/dependabot.yml and dependency tooling updates

Suggested labels

config-change

Suggested reviewers

• sdmcgeown
• smailliwcs
• seanmcilvenna

Poem

🐰 Dependabot bids farewell with grace,
As Snyk.io takes its place,
Config files vanish, references update,
Security flows like a steady state! 🔐

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description includes the required template structure but all content sections are empty placeholders with no actual details about the changes, testing, or documentation updates.	Fill in the Description of Changes section with details about removing Dependabot.yml and updating SECURITY.md to reference Snyk.io instead. Add information about testing performed and documentation updates.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main change: removing the Dependabot configuration file, which is the primary modification in this pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[edward-miller-lcg]

looks good.