From f7e60cfff43e003a095084bdbbecc34cb5d05642 Mon Sep 17 00:00:00 2001
From: Jaden VanEckhout <jadenv@users.noreply.github.com>
Date: Wed, 7 Oct 2026 10:19:24 -0500
Subject: [PATCH] chore: adopt the CoSchedule repo standard

---
 .github/CODEOWNERS             |  6 +++++
 .github/dependabot.yml         | 40 ++++++++++++++++++++++++++++++++++
 .github/workflows/pr-title.yml | 11 ++++++++++
 .gitignore                     |  9 ++++++++
 4 files changed, 66 insertions(+)
 create mode 100644 .github/CODEOWNERS
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/pr-title.yml

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 000000000..55c7214df
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,6 @@
+* @CoSchedule/engineers
+
+# Dependency manifests have no owner, so Dependabot updates can auto-merge once CI passes.
+package.json
+package-lock.json
+pnpm-lock.yaml
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..77b058ed7
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,40 @@
+version: 2
+
+updates:
+  - package-ecosystem: npm
+    directories: ['/']
+    schedule:
+      interval: weekly
+      day: monday
+    # Majors each get their own PR, so a stuck one can't hold back the rest. The limit leaves
+    # room for them without blocking the weekly group.
+    open-pull-requests-limit: 10
+    # Waiting a few days before taking a new release keeps compromised or yanked packages out.
+    # Security updates skip the wait.
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: chore
+      include: scope
+    # This repo has no auto-merge, so a person merges each grouped update.
+    groups:
+      minor-and-patch:
+        applies-to: version-updates
+        update-types: [minor, patch]
+      security:
+        applies-to: security-updates
+        patterns: ['*']
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: ci
+      include: scope
+    groups:
+      actions:
+        patterns: ['*']
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
new file mode 100644
index 000000000..b9bc0d09a
--- /dev/null
+++ b/.github/workflows/pr-title.yml
@@ -0,0 +1,11 @@
+name: PR title
+
+on:
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+
+jobs:
+  lint-pr-title:
+    uses: CoSchedule/platform/.github/workflows/pr-title.yml@v1
+    permissions:
+      contents: read
diff --git a/.gitignore b/.gitignore
index bb83eae77..306ffbda5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,12 @@ mock.png
 .build*
 jquery.fn.*
 .idea/
+
+node_modules/
+.env
+.env.local
+.env.*.local
+coverage/
+*.log
+.DS_Store
+.playwright-mcp/