feat(community): add dependabot configuration and issue forms

[yuanweize]

Summary

• Added .github/dependabot.yml covering Go modules, npm dependencies in /web, and GitHub Actions workflows with weekly schedules and grouped PRs.
• Added structured GitHub Issue Forms:
  • bug_report.yml (version, OS, reproduction steps, expected behavior, logs)
  • feature_request.yml (problem context, solution proposal, alternatives)
  • config.yml (disabling blank issues and routing security reports to Private Advisories)

Risk

Low risk — non-destructive repository metadata and community automation files.

Validation

• Validated YAML syntax locally.
• Checked against GitHub issue forms and Dependabot v2 schema specifications.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 83ac6885-6382-46f6-83c5-28aae042cfea

📥 Commits

Reviewing files that changed from the base of the PR and between 412fc68 and e408268.

📒 Files selected for processing (4)

• .github/ISSUE_TEMPLATE/bug_report.yml
• .github/ISSUE_TEMPLATE/config.yml
• .github/ISSUE_TEMPLATE/feature_request.yml
• .github/dependabot.yml

 ________________________________________________________________________________
< This conditional is a choose-your-own-adventure where every choice is 'panic'. >
 --------------------------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Copilot review overview

🟢 Approval recommended

Only a non-blocking nit remains.

Review effort: Lite
Findings: None

What changed in this PR

Adds Dependabot automation and structured GitHub issue forms for community support.

Changes:

• Configures weekly grouped updates for Actions, Go, and web npm dependencies.
• Adds bug-report and feature-request forms.
• Disables blank issues and routes security reports to private advisories.
• Nit: update the bug-report reproduction example to use a supported CLI invocation.

File	Description
.github/​ISSUE_TEMPLATE/​feature_request.yml	Structured feature-request form
.github/​ISSUE_TEMPLATE/​config.yml	Issue routing and blank-issue settings
.github/​ISSUE_TEMPLATE/​bug_report.yml	Structured bug-report form
.github/​dependabot.yml	Dependabot schedules and dependency grouping

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.