fix(labels): align workflows and Dependabot with the new label scheme

.github/aw/actions-lock.json

@@ -14,6 +14,11 @@
       "repo": "github/gh-aw-actions/setup",
       "version": "v0.63.0",
       "sha": "9128d2542bbf1bdfec94dabeaf3e1d3c0d402577"
+    },
+    "github/gh-aw/actions/setup@v0.57.1": {
+      "repo": "github/gh-aw/actions/setup",
+      "version": "v0.57.1",
+      "sha": "36e5751f7c3d40ec9df8f44c0252b7bfabfc4dd6"
     }
   }
 }

.github/dependabot.yml

@@ -0,0 +1,27 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    # Keep version-update PRs disabled; these labels also apply to security updates.
+    open-pull-requests-limit: 0
+    labels:
+      - "type: dependencies"
+      - "language: javascript"
+  - package-ecosystem: npm
+    directory: /website
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 0
+    labels:
+      - "type: dependencies"
+      - "language: javascript"
+  - package-ecosystem: cargo
+    directory: /apps/gateway
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 0
+    labels:
+      - "type: dependencies"
+      - "language: rust"

.github/workflows/check-worker-versions.yml

@@ -142,10 +142,10 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          # List open issues with the worker-update label and filter by title prefix.
+          # List open issues with the type: worker-update label and filter by title prefix.
           # Using list + jq instead of --search to avoid GitHub search index lag
           # which can cause duplicate issues when runs happen close together.
-          ISSUE_JSON=$(gh issue list --state open --label worker-update --json title,url,number \
+          ISSUE_JSON=$(gh issue list --state open --label "type: worker-update" --json title,url,number \
             --jq '[.[] | select(.title | startswith("chore(${{ matrix.worker }}): update to"))] | .[0] // empty')
           if [ -n "$ISSUE_JSON" ]; then
             ISSUE_URL=$(echo "$ISSUE_JSON" | jq -r '.url')
@@ -203,7 +203,7 @@ jobs:
           ISSUE_URL=$(gh issue create \
             --title "${{ steps.check.outputs.title }}" \
             --body-file /tmp/issue-body.md \
-            --label "worker-update")
+            --label "type: worker-update")
           echo "issue_url=$ISSUE_URL" >> $GITHUB_OUTPUT
 
       - name: Close superseded issue

.github/workflows/daily-repo-status.md

@@ -6,7 +6,8 @@ description: |
   and project recommendations.
 
 on:
-  schedule: daily
+  schedule:
+    - cron: "47 23 * * *"
   workflow_dispatch:
 
 permissions:
@@ -32,7 +33,7 @@ safe-outputs:
   allowed-github-references: []
   create-issue:
     title-prefix: "[repo-status] "
-    labels: [report, daily-status]
+    labels: [agentic-workflows]
     close-older-issues: true
 source: githubnext/agentics/workflows/daily-repo-status.md@346204513ecfa08b81566450d7d599556807389f
 ---

.github/workflows/daily-test-improver.md

@@ -11,7 +11,8 @@ description: |
   Always thoughtful, quality-focused, and mindful of test maintainability.
 
 on:
-  schedule: daily
+  schedule:
+    - cron: "3 6 * * *"
   workflow_dispatch:
   slash_command:
     name: test-assist
@@ -38,7 +39,7 @@ safe-outputs:
   create-pull-request:
     draft: true
     title-prefix: "[Test Improver] "
-    labels: [automation, testing]
+    labels: ["type: automation", "topic: testing"]
     max: 4
     protected-files: fallback-to-issue
   push-to-pull-request-branch:
@@ -47,7 +48,7 @@ safe-outputs:
     max: 4
   create-issue:
     title-prefix: "[Test Improver] "
-    labels: [automation, testing]
+    labels: ["type: automation", "topic: testing"]
     max: 4
   update-issue:
     target: "*"
@@ -209,7 +210,7 @@ Always do Task 7 (Update Monthly Activity Summary Issue) every run. In all comme
 
 ### Task 5: Comment on Testing Issues
 
-1. List open issues mentioning tests, coverage, or with `testing` label. Resume from memory's backlog cursor.
+1. List open issues mentioning tests, coverage, or with the `topic: testing` label. Resume from memory's backlog cursor.
 2. For each issue (save cursor in memory): prioritize issues that have never received a Test Improver comment.
 3. If you have something insightful and actionable to say:
    - Suggest testing approaches or strategies
@@ -253,7 +254,7 @@ Always do Task 7 (Update Monthly Activity Summary Issue) every run. In all comme
 
 Maintain a single open issue titled `[Test Improver] Monthly Activity {YYYY}-{MM}` as a rolling summary of all Test Improver activity for the current month.
 
-1. Search for an open `[Test Improver] Monthly Activity` issue with label `testing`. If it's for the current month, update it. If for a previous month, close it and create a new one. Read any maintainer comments - they may contain instructions or priorities; note them in memory.
+1. Search for an open `[Test Improver] Monthly Activity` issue with label `topic: testing`. If it's for the current month, update it. If for a previous month, close it and create a new one. Read any maintainer comments - they may contain instructions or priorities; note them in memory.
 2. **Issue body format** - use **exactly** this structure:
 
    ```markdown

.github/workflows/worker-version-upgrade.md

@@ -7,17 +7,18 @@ description: |
 on:
   issues:
     types: [opened, edited]
-    names: [worker-update]
+    names: ["type: worker-update"]
   workflow_dispatch:
   # Workaround: gh-aw compiler bug — `names:` is commented out in the lock file
   # and no label condition is injected. Use on.steps to enforce label filtering.
   steps:
-    - name: Check worker-update label
+    - name: Check worker update label
       id: label_check
       if: github.event_name != 'workflow_dispatch'
       env:
         LABELS: ${{ toJSON(github.event.issue.labels.*.name) }}
-      run: echo "$LABELS" | grep -q '"worker-update"'
+      run: |
+        echo "$LABELS" | grep -q '"type: worker-update"'
 
 if: github.event_name == 'workflow_dispatch' || needs.pre_activation.outputs.label_check_result == 'success'