[tensornull]

Summary

Dependabot development updates repeatedly combine incompatible toolchain majors, and OpenAI lockfile updates fail packed fixtures because each fixture repeats an exact version. Limit automated development version updates to minor and patch releases while preserving production policy and security updates. Packed fixtures now declare the supported OpenAI range, select their exact install version from the root lockfile, and verify the installed version, host deduplication, and API error identity.

Group GitHub Actions updates into one review and document the required review and Publish digest refresh. Action pins, workflow permissions, immutable-tag publication, environment approvals, live request budgets, and replay limits retain their existing checks.

Verification

• Node.js 24.15.0: npm ci --no-audit --no-fund passed.
• npm run verify: formatting, lint, types, all 576 tests, secret and historical content scans, Public Preview, package validation, examples, mocked live smoke, packed fixtures, OpenAI minimum/locked/latest compatibility, and pinned actionlint passed. The final self-containment gate initially rejected the uncommitted worktree.
• After committing, npm run check:self-contained passed against the exact clean HEAD, including a fresh isolated install, all 576 tests, package fixtures, locked compatibility, and actionlint 1.7.12.
• Reproduced the real Dependabot upgrade using its complete OpenAI 6.49.0 lockfile in an isolated candidate, ran npm ci and npm run test:fixtures, and verified ESM, CommonJS, host types, deduplication, and error identity. Source fixture manifests remained unchanged.
• Parsed Dependabot YAML with duplicate-key detection; git diff --check passed.

Existing failed Dependabot branches still need refreshing and review. Remote Actions results will be checked on this PR's exact head before merge; local validation makes no live API or registry-publication claim.

Checklist

• The change is within the current roadmap milestone.
• Public behavior, compatibility claims, and examples are documented.
• Unit, mocked contract, type, lint, format, build, and package checks pass as applicable.
• Packed ESM, CommonJS, and compatible-OpenAI host fixtures pass as applicable.
• No credential, private prompt, customer data, generated build output, or local dependency directory is included.
• Workflow edits pass the repository-pinned actionlint version.
• Remote Actions, live API, and registry evidence are not claimed from local validation.