ci(deps): Bump denoland/setup-deno from 1.1.4 to 2.0.3

.gitattributes

@@ -0,0 +1,62 @@
+# Fogbinder Language Classification for GitHub Linguist
+# RSR Rhodium Standard Repository - ReScript + WASM + Deno
+
+# ⛔ NO TYPESCRIPT - Exclude ALL .ts/.tsx files (including git history)
+# RSR Rhodium R13 mandates ZERO TypeScript in codebase
+*.ts linguist-vendored=true
+*.tsx linguist-vendored=true
+
+# ReScript files (primary language)
+*.res linguist-language=ReScript
+*.resi linguist-language=ReScript
+
+# ReScript generated JavaScript files (exclude from stats)
+*.bs.js linguist-generated=true
+
+# TLA+ formal verification specs
+*.tla linguist-language=TLA
+
+# Rust WASM modules
+*.rs linguist-language=Rust
+
+# Deno configuration
+deno.json linguist-language=JSON
+deno.jsonc linguist-language=JSONC
+
+# ReScript configuration
+bsconfig.json linguist-language=JSON
+
+# Nickel configuration language
+*.ncl linguist-language=Nickel
+
+# Justfile build system
+justfile linguist-language=Just
+
+# AsciiDoc documentation
+*.adoc linguist-documentation=true linguist-language=AsciiDoc
+
+# Markdown (exceptions only)
+*.md linguist-documentation=true
+
+# Exclude from language stats
+.github/workflows/*.yml linguist-vendored=true
+docs/* linguist-documentation=true
+examples/* linguist-documentation=true
+benchmarks/* linguist-vendored=true
+scripts/* linguist-vendored=true
+
+# Git LFS (for large assets if needed)
+*.wasm filter=lfs diff=lfs merge=lfs -text
+
+# Line endings
+* text=auto
+*.res text eol=lf
+*.resi text eol=lf
+*.rs text eol=lf
+*.js text eol=lf
+*.json text eol=lf
+*.adoc text eol=lf
+*.md text eol=lf
+*.sh text eol=lf
+*.yml text eol=lf
+*.tla text eol=lf

.github/dependabot.yml

@@ -1,11 +1,27 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-
 version: 2
 updates:
-  - package-ecosystem: "" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  # Keep GitHub Actions up to date with commit SHAs
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "github-actions"
+    commit-message:
+      prefix: "ci"
+      include: "scope"
+    open-pull-requests-limit: 10
+
+  # Keep Cargo dependencies up to date (WASM modules)
+  - package-ecosystem: "cargo"
+    directory: "/src/wasm"
     schedule:
-      interval: "daily"
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "rust"
+    commit-message:
+      prefix: "deps"
+      include: "scope"
+    open-pull-requests-limit: 5