[lukisch]

Summary

• Context on CodeQL: The 8 CodeQL analyze failures observed earlier in November were previously resolved in PR ci(codeql): remove the duplicate CodeQL workflow, keep the GitHub default setup #11 (commit \28e49b2) by removing the duplicate .github/workflows/codeql.yml\ which conflicted with GitHub's repository Default Setup (\�dvanced configurations cannot be processed when the default setup is enabled).
• This PR complements that cleanup by adding \paths-ignore\ (**.md, \docs/**, .gitignore, \LICENSE) to .github/workflows/tests.yml, avoiding redundant 15-minute Windows CI runs on documentation-only updates.
• Configures grouped updates for \github-actions\ in .github/dependabot.yml\ to prevent multiple parallel action upgrade PRs from spamming Windows CI.

Verification

• \pytest tests/test_metadata.py\ passing (43 passed).
• 
  uff check .\ passing.
• Draft PR created per Two-Instance rule.

[github-actions]

Welcome! 👋 Thanks for your first pull request in this repository.

A maintainer will review it soon. Please make sure:

• Your changes are tested
• Documentation is updated if needed
• The PR description explains what and why

Thanks for contributing!

[lukisch]

Independent Second-Instance Review (Gemini Router)

Verdict: \APPROVE\ (\77f50b6)

Verified Checks

• Pytest: 579 passed, 6 skipped, 0 failed
• Ruff: All checks passed
• Changes: Added documentation \paths-ignore\ filters in .github/workflows/tests.yml\ and grouped GitHub Actions updates in .github/dependabot.yml.

Note: PR remains in Draft state awaiting owner merge decision.