chore(github-tag): pin tag devsecninja/ai-toolkit to 2491ced [automerge]

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
DevSecNinja/ai-toolkit	apm	pinDigest	→ 2491ced

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 6bde2ec7-ad7d-446c-b8eb-8c735f45204c

📥 Commits

Reviewing files that changed from the base of the PR and between 76f027d and 9b7088e.

📒 Files selected for processing (1)

• apm.lock.yaml

Included review availability: Your plan provides up to 10 included reviews per hour; 5 remain after this review.

---

📝 Walkthrough

Walkthrough

The PR pins the APM dependency to a commit, adds GitHub Copilot and Microsoft Learn MCP servers, and refreshes lock metadata for deployments, MCP targets, and local approval hooks.

Changes

APM and MCP update

Layer / File(s)	Summary
APM dependency pin and lock metadata apm.yml, apm.lock.yaml	The dependency changes from the v0.8.0 tag to commit 2491cedec727e722a7751ff516ae7b7c95de922b. The lock metadata records APM version 0.31.0, updated generation data, and the resolved commit.
MCP configuration and deployment records .github/mcp.json, apm.lock.yaml	The configuration adds GitHub Copilot and Microsoft Learn HTTP MCP servers with wildcard tool access. The lockfile records both MCP targets and project-relative deployment metadata.
Local approval hook manifests apm.lock.yaml	The local deployment manifest and hash manifest include the Git-push approval hook and script alongside the existing tool-guardian entries.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: pinning the DevSecNinja/ai-toolkit dependency to commit 2491ced. The automerge marker is also consistent with the stated objective.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}