chore: update CODEOWNERS for dependency files

[onderay]

Automated update to CODEOWNERS so that @kinde-oss/sdk-engineers own dependency definition files and can approve dependency PRs.

[coderabbitai]

Walkthrough

The CODEOWNERS file has been updated to assign ownership of package-related lockfiles and manifests—including package-lock.json, package.json, and pnpm-lock.yaml—to the SDK engineers team. Entries use both direct paths and recursive glob patterns.

Changes

Cohort / File(s)	Summary
CODEOWNERS Configuration CODEOWNERS	Added ownership entries for package dependency files (package.json, package-lock.json, pnpm-lock.yaml) with direct path and glob pattern variants.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

• Simple metadata update with no logic changes
• Repetitive pattern of ownership assignments
• Single file affected with straightforward entries

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: updating the CODEOWNERS file for dependency-related files.
Description check	✅ Passed	The description is directly related to the changeset, explaining the purpose of assigning dependency file ownership to @kinde-oss/sdk-engineers.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch chore/codeowners-deps-20251121-1543

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[coderabbitai]

Actionable comments posted: 0

🧹 Nitpick comments (1)

CODEOWNERS (1)

2-7: Ownership rules achieve the goal; consider simplifying redundant patterns

These entries correctly override the global * @kinde-oss/giants-kinde rule for the listed dependency files, so @kinde-oss/sdk-engineers will be the effective owners of package-lock.json, package.json, and pnpm-lock.yaml wherever they appear. This matches the PR objective.

The pairs like:

• package-lock.json and **/package-lock.json
• package.json and **/package.json
• pnpm-lock.yaml and **/pnpm-lock.yaml

are functionally redundant in CODEOWNERS, since the bare filename pattern already matches at any depth. Keeping both is harmless, but you could drop the **/… variants for brevity if you prefer. Also, if this repo uses other lockfiles (e.g., yarn.lock), you may want similar entries for them in a follow-up.

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 2c8bc42 and f4bfa83.

📒 Files selected for processing (1)

• CODEOWNERS (1 hunks)