chore(renovate): P4c — retire remaining Dependabot machinery + finish bot-agnostic renames

.github/scripts/__tests__/sync_dependabot_campaign.test.js → .github/scripts/__tests__/sync_dependency_campaign.test.js

@@ -20,7 +20,7 @@ const {
   replaceCampaignMarker,
   verboseDryRunLoggingEnabled,
   validateCampaignState,
-} = require('../sync_dependabot_campaign.js');
+} = require('../sync_dependency_campaign.js');
 
 test('formats and parses campaign marker', () => {
   const state = {

.github/scripts/sync_dependabot_campaign.js → .github/scripts/sync_dependency_campaign.js

@@ -932,7 +932,7 @@ function formatCampaignBody(state) {
   const lines = [
     '# Sync/Dependabot Campaign Queue',
     '',
-    '> **Durable tracker** — see [`docs/ops/DURABLE_TRACKING_ISSUES.md`](https://github.com/stranske/Workflows/blob/main/docs/ops/DURABLE_TRACKING_ISSUES.md). The body below is regenerated each cycle by `maint-82-sync-dependabot-campaign.yml`; do not close as part of routine triage.',
+    '> **Durable tracker** — see [`docs/ops/DURABLE_TRACKING_ISSUES.md`](https://github.com/stranske/Workflows/blob/main/docs/ops/DURABLE_TRACKING_ISSUES.md). The body below is regenerated each cycle by `maint-82-sync-dependency-campaign.yml`; do not close as part of routine triage.',
     '',
     'Remote GitHub Actions owns discovery for sync-generated and Dependabot PR rounds. Local Codex should only claim items from this issue when `needs-local-codex` work is queued.',
     '',

.github/sync-manifest.yml

@@ -130,10 +130,6 @@ workflows:
     description: "Renovate config - extends stranske/Workflows//renovate-presets/fleet (shared fleet preset)"
     sync_mode: create_only
 
-  - source: .github/workflows/dependabot-automerge.yml
-    description: "Dependabot auto-merge - automatically merges dependabot PRs when checks pass"
-
-
   # Reusable PR context workflow (medium-effort rate limit optimization)
   - source: .github/workflows/reusable-pr-context.yml
     description: "Reusable PR context workflow - centralized PR data fetching via GraphQL"
@@ -148,6 +144,8 @@ workflows:
 
 # Files to remove from consumer repos (obsolete / harmful when present)
 removals:
+  - target: .github/workflows/dependabot-automerge.yml
+    description: "Remove the retired Dependabot auto-merge workflow - the fleet is on Renovate (platformAutomerge covers auto-merge); see renovate-presets/fleet.json."
   - target: .github/workflows/agents-63-issue-intake.yml
     description: "Remove deprecated issue intake workflow (replaced by agents-64/70)"
   - target: .workflows-lib

.github/workflows/maint-82-sync-dependabot-campaign.yml → .github/workflows/maint-82-sync-dependency-campaign.yml

@@ -1,4 +1,8 @@
-name: Sync/Dependabot Campaign
+name: Sync/Dependency Campaign
+# Watches dependency-bot PRs (renovate[bot]; legacy dependabot[bot]) + consumer
+# sync drift. Internal identifiers (repository_dispatch type, concurrency group,
+# and artifact/state-file names below) intentionally keep the historical
+# "sync-dependabot-campaign" slug for dispatcher + persisted-state continuity.
 
 on:
   schedule:
@@ -95,7 +99,7 @@ jobs:
             const {
               formatCampaignRunSummaryMarkdown,
               runCampaign,
-            } = require('./.github/scripts/sync_dependabot_campaign.js');
+            } = require('./.github/scripts/sync_dependency_campaign.js');
             const fs = require('fs');
 
             const registeredRepos = '${{ steps.registered.outputs.repos }}'
@@ -136,7 +140,7 @@ jobs:
               .join(', ') || '-';
             const unpublishedResults = stats.items_unpublished_source_results || 0;
             await core.summary
-              .addHeading('Sync/Dependabot Campaign')
+              .addHeading('Sync/Dependency Campaign')
               .addList([
                 `Current sync hash: ${result.state.current_sync_hash || '-'}`,
                 `Repos checked: ${stats.repos_checked || 0}/${stats.repos_requested || 0}`,

.github/workflows/maint-dependabot-auto-lock.yml → .github/workflows/maint-auto-lock-deps.yml

@@ -1,4 +1,4 @@
-name: Dependabot Auto-Lock
+name: Auto-lock dependency PRs
 # Backstop that regenerates requirements.lock when a dependency bot updates a
 # declared lock input file, so the checked-in lock stays in sync.
 #

docs/ci/WORKFLOWS.md

@@ -160,8 +160,7 @@ Consumer default note: `agents-pr-meta-v4.yml` is a Workflows-repo service workf
 * [`agents-verify-to-issue-v2.yml`](../../.github/workflows/agents-verify-to-issue-v2.yml) creates follow-up issues from verification feedback when PRs receive CONCERNS or FAIL verdicts using the enhanced LangChain analyzer. The legacy v1 issue workflow has been removed.
 * [`agents-verify-to-new-pr.yml`](../../.github/workflows/agents-verify-to-new-pr.yml) creates a follow-up issue from verification feedback, enforces the follow-up chain-depth limit, emits verifier follow-up ledger records, and kicks off a new PR when policy allows it.
 * [`maint-auto-label-dep-prs.yml`](../../.github/workflows/maint-auto-label-dep-prs.yml) automatically applies the `agents:allow-change` label to dependency-bot PRs (Dependabot + Renovate).
-* [`maint-dependabot-auto-lock.yml`](../../.github/workflows/maint-dependabot-auto-lock.yml) automatically regenerates requirements.lock when dependabot updates pyproject.toml.
-* [`maint-dependabot-weekly-sweep.yml`](../../.github/workflows/maint-dependabot-weekly-sweep.yml) sweeps registered consumer repos weekly to enable Dependabot auto-merge and merge eligible PRs when checks are green, requesting branch deletion for merged Dependabot branches.
+* [`maint-auto-lock-deps.yml`](../../.github/workflows/maint-auto-lock-deps.yml) regenerates requirements.lock (re-running the command recorded in the lock header) when a dependency bot updates an input — a Workflows-local backstop to the fleet Renovate pip-compile manager.
 * [`agents-verifier.yml`](../../.github/workflows/agents-verifier.yml) runs when `verify:*` labels are applied to a pull request (or via manual dispatch) to assemble acceptance/task context, execute LLM-based verifier modes, and post a verdict. `checkbox` mode uses the Codex CLI to drive checklist-style verification, while `evaluate` and `compare` run non-Codex verifier flows. In `compare` mode, two LLM providers (gpt-5.4 + claude-sonnet-4-6) evaluate independently with unanimous-PASS consensus. On CONCERNS or FAIL, maintainers (or follow-up automation) can apply the `verify:create-new-pr` label to trigger `agents-verify-to-new-pr.yml`, which uses a 4-round LLM pipeline to generate a follow-up issue when chain-depth policy allows it. Follow-up chain depth must not exceed 2; the workflow records policy/disposition metadata and applies `needs-human` at the limit. See [`docs/analysis/verify-compare-40pr-evaluation-feb-2026.md`](../analysis/verify-compare-40pr-evaluation-feb-2026.md) for the Feb 2026 evaluation baseline.
 * [`agents-weekly-metrics.yml`](../../.github/workflows/agents-weekly-metrics.yml) aggregates agent metrics (keepalive, autofix, verifier) on a weekly schedule and generates a markdown summary.
 * [`agents-debug-issue-event.yml`](../../.github/workflows/agents-debug-issue-event.yml) dumps the GitHub event context for debugging issue triggers.
@@ -204,7 +203,7 @@ Scheduled health jobs keep the automation ecosystem aligned:
 * [`maint-74-ledger-base-sync.yml`](../../.github/workflows/maint-74-ledger-base-sync.yml) aligns `.agents` ledger base entries to the repository default branch on a weekly schedule or manual dispatch.
 * [`maint-80-langsmith-metrics-dashboard.yml`](../../.github/workflows/maint-80-langsmith-metrics-dashboard.yml) generates weekly LangSmith trace coverage dashboard - downloads metrics from autopilot artifacts, computes coverage, creates issue report (scheduled Monday 9AM UTC, manual dispatch).
 * [`maint-81-langsmith-fleet-conformance.yml`](../../.github/workflows/maint-81-langsmith-fleet-conformance.yml) validates fleet artifact coverage against `config/langsmith_fleet_registry.json` and reports missing/stale/invalid records (scheduled Monday 9:30AM UTC, manual dispatch with optional enforcement).
-* [`maint-82-sync-dependabot-campaign.yml`](../../.github/workflows/maint-82-sync-dependabot-campaign.yml) refreshes a GitHub-visible sync/Dependabot campaign issue so local Codex only claims queued bot-review work when remote discovery finds active review threads.
+* [`maint-82-sync-dependency-campaign.yml`](../../.github/workflows/maint-82-sync-dependency-campaign.yml) refreshes a GitHub-visible sync/dependency campaign issue so local Codex only claims queued bot-review work when remote discovery finds active review threads.
 * [`maint-83-bootstrap-consumer.yml`](../../.github/workflows/maint-83-bootstrap-consumer.yml) applies the manual GitHub-settings bootstrap toggles a freshly-registered consumer needs (SETUP_CHECKLIST §3.1/§3.3/§3.3.1: `default_workflow_permissions=write`, `USE_CONSOLIDATED_WORKFLOWS` + `ALLOWED_KEEPALIVE_LOGINS` variables, and the `stranske-automation-bot` push-collaborator invite) via `scripts/bootstrap_consumer_settings.py` (manual dispatch, dry-run by default).
 * [`maint-84-prune-agent-stubs.yml`](../../.github/workflows/maint-84-prune-agent-stubs.yml) garbage-collects `agents/<agent>-<N>.md` bootstrap stubs whose issue `#N` is closed, preventing unbounded accumulation; runs weekly (Monday 08:00 UTC) via `scripts/prune_agent_stubs.py`.