feature: add dependabot and npm workspaces (#10)

.github/dependabot.yml

@@ -0,0 +1,24 @@
+version: 2
+updates:
+  - package-ecosystem: 'npm'
+    labels: ['dependencies', 'autoupdate']
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    versioning-strategy: increase
+    groups:
+      production-dependencies:
+        applies-to: version-updates
+        dependency-type: 'production'
+        update-types:
+          - 'minor'
+          - 'patch'
+      development-dependencies:
+        applies-to: version-updates
+        dependency-type: 'development'
+        update-types:
+          - 'minor'
+          - 'patch'
+    ignore:
+      - dependency-name: '*'
+        update-types: ['version-update:semver-major']

.github/workflows/dependabot-ci.yml

@@ -0,0 +1,16 @@
+name: dependabot-ci
+on: pull_request
+
+jobs:
+  dependabot-tests:
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - run: npm ci
+      - run: npm run build --workspaces --if-present
+      - run: npm test --if-present # run the monorepo root tests
+      - run: npm test --workspaces --if-present # run the individual packages tests