chore(depenabot): fix config [WPB-22420]

[aweiss-dev]

WPB-22420 [Web] General maintenance ticket for PR merges

Pull Request

Summary

• Added the root as well
• Blocked major updates
• Run all npm updates only sundays

---

Security Checklist (required)

• External inputs are validated & sanitized on client and/or server where applicable.
• API responses are validated; unexpected shapes are handled safely (fallbacks or errors).
• No unsafe HTML is rendered; if unavoidable, sanitization is applied and documented where it happens.
• Injection risks (XSS/SQL/command) are prevented via safe APIs and/or escaping.

Accessibility (required)

• I have read and this PR upholds our Accessibility Best Practices.

Standards Acknowledgement (required)

• I have read and this PR upholds our Coding Standards and Tech Radar Choices.

---

Screenshots or demo (if the user interface changed)

Notes for reviewers

• Trade-offs:
• Follow-ups (linked issues):
• Linked PRs (e.g. web-packages):

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This pull request updates the Dependabot configuration to standardize dependency management across the monorepo by adding consistent major version update protection and introducing a new root workspace configuration for better dependency tracking.

Key Changes:

• Added a new root workspace (/) npm configuration with weekly scheduling and major version update protection
• Applied consistent ignore rules to prevent major version updates (version-update:semver-major) across all npm package ecosystems
• Improved comment clarity by changing "Webapp configs" to "Webapp config dependencies"

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 35.21%. Comparing base (a2635aa) to head (8e317dd).
⚠️ Report is 1 commits behind head on dev.

Additional details and impacted files

@@           Coverage Diff           @@
##              dev   #20009   +/-   ##
=======================================
  Coverage   35.21%   35.21%           
=======================================
  Files         837      837           
  Lines       22905    22905           
  Branches     4765     4765           
=======================================
  Hits         8067     8067           
  Misses      14017    14017           
  Partials      821      821           

Flag	Coverage Δ
app_webapp	35.21% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

🔗 Download Full Report Artifact

🧪 Playwright Test Summary

• ✅ Passed: 100
• ❌ Failed: 9
• ⏭ Skipped: 11
• 🔁 Flaky: 9
• 📊 Total: 129
• ⏱ Total Runtime: 565.1s (~ 9 min 25 sec)

specs/Accessibility/Accessibility.spec.ts (❌ 1 failed, ⚠️ 1 flaky)

• ❌ Accessibility > I should not lose a drafted message when switching between conversations in collapsed view (tags: TC-51, regression)
• ⚠️ Accessibility > I want to see collapsed view when app is narrow (tags: TC-48, regression)

specs/AccountSettingsSpecs/accountSettings.spec.ts (❌ 1 failed, ⚠️ 0 flaky)

• ❌ account settings > I should not be able to change email of user managed by SCIM (tags: TC-60, regression)

specs/AppLock/AppLock.spec.ts (❌ 1 failed, ⚠️ 0 flaky)

• ❌ AppLock > Web: App should not lock if I switch back to webapp tab in time (during inactivity timeout) (tags: TC-2752, TC-2753, regression)

specs/ArchiveSpecs/archive.spec.ts (❌ 0 failed, ⚠️ 1 flaky)

• ⚠️ Accessibility > I want to archive the 1on1 conversation from conversation details (tags: TC-105, regression)

specs/Block/block.spec.ts (❌ 2 failed, ⚠️ 1 flaky)

• ❌ Block: User A and User B are NOT in the same team > Verify you can block a user who is not in your team (tags: TC-140, regression)
• ❌ Block: User A and User B are NOT in the same team > Verify you can unblock someone from conversation list options (tags: TC-148, regression)
• ⚠️ Block: User A and User B are NOT in the same team > Verify you can unblock user from 1:1 conversation details (tags: TC-142, regression)

specs/Calling/calling.spec.ts (❌ 0 failed, ⚠️ 1 flaky)

• ⚠️ Calling > I want to answer incoming call with Join button in conversation view (tags: TC-2826, regression)

specs/ClearConversationContent/clearConversationContent.spec.ts (❌ 0 failed, ⚠️ 2 flaky)

• ⚠️ Clear Conversation Content > I want to cancel clearing content of 1:1 conversation via conversation list (tags: TC-155, regression)
• ⚠️ Clear Conversation Content > I want to clear the group conversation content from conversation details options (tags: TC-424, regression)

specs/CriticalFlow/accountManagement-TC-8639.spec.ts (❌ 1 failed, ⚠️ 0 flaky)

• ❌ Account Management (tags: TC-8639, crit-flow-web)

specs/CriticalFlow/Cells/uploadingFileInGroupConversation.spec.ts (❌ 1 failed, ⚠️ 0 flaky)

• ❌ Uploading an file in a group conversation (tags: crit-flow-cells, regression)

specs/CriticalFlow/messagesIn1On1-TC-8750.spec.ts (❌ 0 failed, ⚠️ 1 flaky)

• ⚠️ Messages in 1:1 (tags: TC-8750, crit-flow-web)

specs/CriticalFlow/oneOnOneCall-TC-8754.spec.ts (❌ 1 failed, ⚠️ 0 flaky)

• ❌ 1:1 Video call with device switch and screenshare (tags: TC-8754, crit-flow-web)

specs/CriticalFlow/personalAccountLifecycle-TC-8638.spec.ts (❌ 0 failed, ⚠️ 1 flaky)

• ⚠️ Personal Account Lifecycle (tags: TC-8638, crit-flow-web)

specs/Folders/folders.spec.ts (❌ 0 failed, ⚠️ 1 flaky)

• ⚠️ Folders > I want to move a group conversation to an existing custom folder (tags: TC-548, regression)

specs/Reply/reply.spec.ts (❌ 1 failed, ⚠️ 0 flaky)

• ❌ Reply > I should not be able to send a reply after I got removed from the conversation (tags: TC-3014, regression)