Codegen cleanup, Dependabot migration, OpenAPI spec refresh (#28)

* Remove no-op class_overrides from codegen config

The keys Gate_QisGate / Gate_NativeGate never matched anything:
openapi-python-client looks up class_overrides by the post-pascal_case
ClassName (GateQisGate / GateNativeGate), so the underscore-form keys
were silently ignored. Generated output is unchanged.

* Migrate dependency updates from Renovate to Dependabot

Renovate isn't installed on the org and going public doesn't change
that - the renovate.json was inert. Dependabot is GitHub-native (no
third-party app/ToS), free for public repos, and fully covers this
repo's surface (uv lockfile + pinned GitHub Actions).

Behavior preserved:
- Weekly Monday schedule
- "dependencies" label on every PR
- Grouped Action updates (single PR per week)

Behavior added (industry standard per GitHub 2026 docs / Astral docs):
- 7-day cooldown to skip day-zero releases
- Grouped Python updates

Behavior dropped (intentional):
- Auto-merge of Action updates. Dependabot lacks native automerge;
  adding it requires a separate workflow + a SHA-pinned auxiliary
  action. Reviewing one grouped weekly Action-bump PR is acceptable
  overhead. Easy to add later if it isn't.

Pre-commit hook revs (.pre-commit-config.yaml) are not covered by
Dependabot. Update via `pre-commit autoupdate` periodically; this
matches what was effectively happening with Renovate too, since
Renovate config didn't enable the pre-commit manager.

* Add pre-commit ecosystem to Dependabot config

GitHub announced native pre-commit support on 2026-03-10. Dependabot
now parses .pre-commit-config.yaml and bumps the rev field across all
hooks. Same weekly schedule + cooldown + grouping as the other
ecosystems, so all weekly updates land on Mondays.

Source: https://github.blog/changelog/2026-03-10-dependabot-now-supports-pre-commit-hooks/

* Add tiered cooldown and reorder Dependabot ecosystems

Per-semver cooldown (3/7/30 days for patch/minor/major) extends the
supply-chain wait window for major bumps while keeping patches snappy.
Ecosystem order now follows the prevailing convention used by pypa/pip,
psf/requests, cpython, and fastapi: github-actions before uv before
pre-commit.

* Limit semver cooldown tiers to the uv ecosystem

Dependabot rejected per-semver cooldown keys on github-actions and
pre-commit ecosystems - those tiers are only valid on semver-versioned
package managers. Keep the 3/7/30 tiers on uv; both other ecosystems
fall back to default-days only.

* Refresh vendored OpenAPI spec from upstream

Closes #26

* Normalize line endings to LF via .gitattributes

Adds `* text=auto eol=lf` so Windows checkouts match the LF used by CI,
Docker, and our linters/formatters.

* Drop EOL normalization rule from .gitattributes

No-op for the current contributor base (macOS dev, Linux CI). Trim back
to just the Linguist classifications.

Author: splch

.gitattributes

@@ -1,13 +1,13 @@
 # Auto-generated by openapi-python-client.
 ionq_core/__init__.py linguist-generated=true
-ionq_core/client.py linguist-generated=true
-ionq_core/errors.py linguist-generated=true
-ionq_core/types.py linguist-generated=true
-ionq_core/api/** linguist-generated=true
-ionq_core/models/** linguist-generated=true
+ionq_core/client.py   linguist-generated=true
+ionq_core/errors.py   linguist-generated=true
+ionq_core/types.py    linguist-generated=true
+ionq_core/api/**      linguist-generated=true
+ionq_core/models/**   linguist-generated=true
 
 # Vendored upstream OpenAPI spec.
 openapi.json linguist-vendored=true
 
-# Lockfiles.
+# Lockfile.
 uv.lock linguist-generated=true

.github/dependabot.yml

@@ -0,0 +1,40 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    labels: ["dependencies"]
+    groups:
+      actions:
+        patterns: ["*"]
+    cooldown:
+      default-days: 7
+
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    labels: ["dependencies"]
+    groups:
+      python:
+        patterns: ["*"]
+    cooldown:
+      default-days: 7
+      semver-major-days: 30
+      semver-minor-days: 7
+      semver-patch-days: 3
+
+  - package-ecosystem: "pre-commit"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    labels: ["dependencies"]
+    groups:
+      pre-commit:
+        patterns: ["*"]
+    cooldown:
+      default-days: 7

openapi-python-client-config.yaml

@@ -7,11 +7,3 @@ post_hooks:
   - "perl -0777 -pi -e 's/\\A(?!# SPDX-FileCopyrightText)/# SPDX-FileCopyrightText: 2026 IonQ, Inc.\\n# SPDX-License-Identifier: Apache-2.0\\n# \\@generated\\n\\n/' $(find . -name '*.py')"
   - "ruff check . --fix-only"
   - "ruff format ."
-
-class_overrides:
-  Gate_QisGate:
-    class_name: QisGateInstruction
-    module_name: qis_gate_instruction
-  Gate_NativeGate:
-    class_name: NativeGateInstruction
-    module_name: native_gate_instruction