Add dependabot configuration

This causes dependabot to run a daily check to see if dependencies should be upgraded and open a PR for each such version bump. Upgrades are suggested for all new versions of GitHub actions. For npm packages, only upgrades related to security issues are suggested.
Concordium · Sep 5, 2023 · adb4237 · adb4237
1 parent 5a1bbcc
commit adb4237
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,12 @@
+version: 2
+updates:
+    - package-ecosystem: github-actions
+      directory: /
+      schedule:
+          interval: daily
+
+    - package-ecosystem: npm
+      directory: /
+      schedule:
+          interval: daily
+      open-pull-requests-limit: 0 # disable non-security upgrades