[stphnwlsh]

Summary

Generated solutions don't ship dependabot.yml, but packages-and-dependencies said Dependabot opens the monthly update and told agents not to update by hand between its runs, so nothing in a solution would ever update its packages. That skill and docker-and-compose now say Dependabot does the monthly update when it's set up, and it's done by hand with dotnet list package --outdated when it isn't. The same change goes to all five templates so the drift check stays green.

Related issues

Part of LeanMeanCleanApps/.github#103.

Type of change

• Bug fix
• New feature
• Breaking change (the generated solution or template parameters change in a way existing users will notice)
• Refactoring or clean-up
• Documentation
• Build, pipeline or dependency update

Shared layers

• This only touches the Presentation layer of this template.
• This touches the Application or Infrastructure layers, tests, pipeline or repository setup, so it needs to be carried across all five templates.

Checklist

• dotnet build and dotnet test pass locally with no warnings. (Not needed: skill text only.)
• I added or updated tests, and line coverage stays at or above 95%. (Not needed.)
• I updated the README or docs where behaviour changed. (Not needed: the docs site doesn't mention Dependabot for solutions.)
• If this changes how we do something, I updated the matching skill in .agents/skills.
• I checked the template still installs and creates a working solution (see CONTRIBUTING.md). (The pipeline's Verify Template step covers it.)

[github-actions]

Build Pipeline

✅ Ready to merge. Every stage passed.

Stage	Result	Details
Build	🟢 Passed	Version 2026.11.08.238-pr-67 · Template package 250 KB
Test	🟢 Passed	304 passed · 0 failed · 0 skipped · Template installs, builds and passes its tests
Coverage	🟢 Passed	100% (1119 of 1119 lines) · Needs 95%
Static Analysis	🟢 Passed	No open CodeQL alerts
Dependency Review	🟢 Passed	0 vulnerable packages · 0 licence problems
Container Scan	🟢 Passed	Image starts and answers · 1 open Trivy alert, none blocking: 1 medium

_{Commit b1ba9b1 · Full run}