chore: improve project quality and CI infrastructure

- Add Dependabot configuration for automated weekly dependency updates
- Add nextest configuration with default and CI profiles
- Enhance cargo-deny security advisory documentation with detailed justifications
- Standardize binrw to 0.15.0 across workspace (wow-adt, wow-wmo)
- Fix MSRV reference in CONTRIBUTING.md (1.86.0 → 1.92.0)
- Replace unwrap() with expect() in CLI code for better error context
- Use if-let patterns instead of is_some()/unwrap() combinations

Related to project quality assessment recommendations.

Author: danielsreichenbach

.config/nextest.toml

@@ -0,0 +1,20 @@
+[profile.default]
+# Time to wait for a test to complete before timing out
+slow-timeout = { period = "60s", terminate-after = 2 }
+
+# Reuse test binaries across runs for faster execution
+# Useful during development
+reuse-build = true
+
+# Show output of all tests, not just failures
+failure-output = "immediate-final"
+
+[profile.ci]
+# More aggressive timeouts for CI
+slow-timeout = { period = "30s", terminate-after = 3 }
+
+# Always run tests from scratch in CI
+reuse-build = false
+
+# Use all available cores
+test-threads = "num-cpus"

.github/dependabot.yml

@@ -0,0 +1,25 @@
+version: 2
+updates:
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "wowemulation-dev"
+    assignees:
+      - "wowemulation-dev"
+    labels:
+      - "dependencies"
+      - "dependabot"
+    commit-message:
+      prefix: "chore(deps)"
+      include: "scope"
+    ignore:
+      # Ignore major version updates for these crates
+      - dependency-name: "binrw"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "binrw_derive"
+        update-types: ["version-update:semver-major"]

CHANGELOG.md

@@ -8,6 +8,34 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Changed
+
+- **Dependencies**: Standardized binrw to 0.15.0 across workspace
+  - wow-adt and wow-wmo now use workspace binrw version instead of pinned 0.14
+  - Reduces dependency duplication and compile time
+
+### Fixed
+
+- **Documentation**: Corrected MSRV reference in CONTRIBUTING.md (1.86.0 → 1.92.0)
+- **Code Quality**: Replaced unwrap() with expect() in CLI code for better error context
+  - warcraft-rs progress bar utilities and command implementations
+  - file-formats/world-data/wow-adt model export
+- **Code Quality**: Used if-let patterns instead of is_some()/unwrap() combinations
+  - warcraft-rs/src/commands/adt.rs: blend mesh header access
+  - file-formats/world-data/wow-adt/src/adt_set.rs: optional file loading (tex0, obj0, lod)
+
+### Added
+
+- **CI**: Added Dependabot configuration for automated dependency updates
+  - Weekly dependency checks on Mondays
+  - Ignore major binrw updates to maintain compatibility
+- **CI**: Added nextest configuration with default and CI profiles
+  - Configured slow timeouts and reuse-build settings
+  - Separate CI profile for stricter timeouts
+- **Security**: Enhanced cargo-deny security advisory documentation
+  - Added detailed justifications for RUSTSEC-2023-0071 and RUSTSEC-2024-0436
+  - Documented dependency trees and review dates for ignored advisories
+
 ## [0.6.1] - 2026-01-20
 
 ### Fixed

CONTRIBUTING.md

@@ -114,7 +114,7 @@ Our CI/CD pipeline automatically runs the following checks on all pull requests:
 
 2. **Test Matrix**:
    - Runs on Linux, Windows, and macOS
-   - Tests with Rust stable, beta, and MSRV (1.86.0)
+   - Tests with Rust stable, beta, and MSRV (1.92.0)
    - Tests with all features and no default features
 
 3. **Documentation**: