add dependabot

.github/auto-merge.yml

@@ -0,0 +1,27 @@
+# Automatically merge Dependabot PRs when version comparison is within the range
+# that is configured in .github/auto-merge.yml
+
+name: Auto-Merge Dependabot PRs
+
+on:
+    # WARNING: This needs to be run in the PR base, DO NOT build untrusted code in this action
+    # details under https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/
+    pull_request_target:
+
+jobs:
+    auto-merge:
+        if: github.actor == 'dependabot[bot]'
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Check if PR should be auto-merged
+              uses: ahmadnassri/action-dependabot-auto-merge@v2
+              with:
+                  # In order to use this, you need to go to https://github.com/settings/tokens and
+                  # create a Personal Access Token with the permission "public_repo".
+                  # Enter this token in your repository settings under "Secrets" and name it AUTO_MERGE_TOKEN
+                  github-token: ${{ secrets.AUTO_MERGE_TOKEN }}
+                  # By default, squash and merge, so Github chooses nice commit messages
+                  command: squash and merge

.github/dependabot.yml

@@ -0,0 +1,22 @@
+version: 2
+updates:
+    - package-ecosystem: npm
+      directory: "/"
+      schedule:
+          interval: monthly
+          time: "04:00"
+          timezone: Europe/Berlin
+      open-pull-requests-limit: 5
+      assignees:
+          - Lucky-ESA
+      versioning-strategy: increase
+
+    - package-ecosystem: github-actions
+      directory: "/"
+      schedule:
+          interval: monthly
+          time: "04:00"
+          timezone: Europe/Berlin
+      open-pull-requests-limit: 5
+      assignees:
+          - Lucky-ESA

.github/workflows/dependabot-auto-merge.yml

@@ -0,0 +1,27 @@
+# Automatically merge Dependabot PRs when version comparison is within the range
+# that is configured in .github/auto-merge.yml
+
+name: Auto-Merge Dependabot PRs
+
+on:
+    # WARNING: This needs to be run in the PR base, DO NOT build untrusted code in this action
+    # details under https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/
+    pull_request_target:
+
+jobs:
+    auto-merge:
+        if: github.actor == 'dependabot[bot]'
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Check if PR should be auto-merged
+              uses: ahmadnassri/action-dependabot-auto-merge@v2
+              with:
+                  # In order to use this, you need to go to https://github.com/settings/tokens and
+                  # create a Personal Access Token with the permission "public_repo".
+                  # Enter this token in your repository settings under "Secrets" and name it AUTO_MERGE_TOKEN
+                  github-token: ${{ secrets.AUTO_MERGE_TOKEN }}
+                  # By default, squash and merge, so Github chooses nice commit messages
+                  command: squash and merge