ci(pr-template): Add PR template for automated dependency updates

.github/PULL_REQUEST_TEMPLATE/dependency-update.md

@@ -0,0 +1,65 @@
+## Dependency Update
+
+<!-- This template is for automated dependency update PRs (Dependabot, Renovate, etc.) -->
+
+## Update Summary
+
+| Field | Value |
+|-------|-------|
+| Tool | <!-- Dependabot / Renovate / Manual --> |
+| Update Type | <!-- major / minor / patch / digest --> |
+| Package Manager | <!-- npm / pip / cargo / docker / github-actions --> |
+
+## Dependencies Updated
+
+<!-- Automatically populated by dependency tools, or fill manually -->
+
+| Package | From | To | Changelog |
+|---------|------|----|-----------| 
+| `package-name` | `x.x.x` | `y.y.y` | [Link]() |
+
+## Risk Assessment
+
+- [ ] **Major version** - Breaking changes possible
+- [ ] **Minor version** - New features, backward compatible
+- [ ] **Patch version** - Bug fixes only
+- [ ] **Security update** - Addresses CVE or vulnerability
+
+## Security Notes
+
+<!-- If this is a security update, provide details -->
+
+| CVE | Severity | Description |
+|-----|----------|-------------|
+| <!-- CVE-XXXX-XXXXX --> | <!-- Critical/High/Medium/Low --> | <!-- Brief description --> |
+
+## Compatibility Checklist
+
+- [ ] No breaking changes in updated dependencies
+- [ ] Peer dependency requirements still satisfied
+- [ ] Lock file updated correctly
+- [ ] No conflicting version constraints
+
+## Testing
+
+- [ ] CI pipeline passes
+- [ ] Unit tests pass
+- [ ] Integration tests pass (if applicable)
+- [ ] Local build succeeds
+
+## Auto-Merge Eligibility
+
+<!-- For repository maintainers to assess auto-merge safety -->
+
+- [ ] Patch update from trusted source
+- [ ] All CI checks passing
+- [ ] No security advisories on new version
+- [ ] Update is within allowed version range
+
+## Related PRs
+
+<!-- Link to related dependency updates if part of a batch -->
+
+## Additional Notes
+
+<!-- Any other context about this dependency update -->