ci: reconfigure CodeRabbit to improve signal-to-noise ratio

[serhalp]

🔗 Linked issue

N/A

🧭 Context

We've had CodeRabbit enabled for most of the lifetime of this project, but we haven't really adjusted its knobs. There are opportunities to get more value and less noise out of it.

See https://docs.coderabbit.ai/reference/configuration.

📚 Description

• tweak various options to decrease noise and increase signal
• enable every relevant security tool
• experimentally turn on slop detection (this just labels PRs with the label 007 if it flags it as slop)
• switch to UK English as the team is majority European 😁

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
npmx.dev	Ready	Preview, Comment	Apr 9, 2026 5:05pm

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
docs.npmx.dev	Ignored		Apr 9, 2026 5:05pm
npmx-lunaria	Ignored		Apr 9, 2026 5:05pm

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[serhalp]

@CodeRabbit review

[coderabbitai]

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[ghostdevv]

switch to UK English as the team is majority European 😁

I don't think most people learn real english, butttttttttt let's do it anyway :D

[coderabbitai]

Warning

Ignoring CodeRabbit configuration file changes. For security, only the configuration from the base branch is applied for open source repositories.

📝 Walkthrough

Walkthrough

A new .coderabbit.yaml configuration file was added to set CodeRabbit's behaviour and preferences. The configuration specifies the assistant language as en-GB and configures PR review settings, including review status, changed-files summaries, sequence diagrams, and linked-issue assessment. It enables slop detection, defines auto-review pause thresholds, and specifies patterns and usernames to ignore during reviews. Pre-merge checks are configured with per-check modes for docstrings, titles, descriptions, and issue assessment. The configuration enables specific automated analysis tools (gitleaks, osvScanner, actionlint, yamllint, shellcheck, dotenvLint) whilst disabling others that are redundant or not suitable for the repository.

🚥 Pre-merge checks | ✅ 1

✅ Passed checks (1 passed)

Check name	Status	Explanation
Description check	✅ Passed	The PR description clearly relates to the changeset, explaining the rationale for configuring CodeRabbit to reduce noise and increase signal.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch serhalp/revamp-coderabbit-config

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 862f004a-8917-4cef-a5f8-8f9f9ac9707b

📥 Commits

Reviewing files that changed from the base of the PR and between c93d9b0 and 8783c63.

📒 Files selected for processing (1)

• .coderabbit.yaml

[ghostdevv]

LGTM ship it