[jdwyah]

This is a comment-only follow-up to #16. It records in dependabot.yml why the committed lockfile must not point at ../sdk-ruby. Changing this file also starts a fresh Dependabot run, which is how I check that the bundler job is green now. A dynamic Dependabot run can't be re-run from the API.

🤖 Generated with Claude Code

[github-actions]

SSDLC sanity check: PASS

No issues found.

_{Model: claude-sonnet-5-5 (effort medium), commit 7a5c5b2, prompt repo@553995d. Only BLOCK fails this check. To override a BLOCK after reading it, a human adds ssdlc-approved (sanity check only, this commit only) or, in an emergency, hotfix (all checks, needs a justification and follow-up bead).}