MAINT: Add dependabot (#24)

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      actions:
+        patterns:
+          - "*"

.github/workflows/release.yml

@@ -43,14 +43,15 @@ jobs:
   pypi:
     needs: package
     runs-on: ubuntu-latest
-    if: github.event_name == 'release'
     steps:
       - uses: actions/download-artifact@v3
         with:
           name: dist
           path: dist
+      - run: ls -lR dist
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+        if: github.event_name == 'release'
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}

.gitignore

@@ -129,3 +129,4 @@ dmypy.json
 .pyre/
 
 junit-results.xml
+.DS_Store