squash!

.github/dependabot.yml

@@ -0,0 +1,14 @@
+version: 2
+enable-beta-ecosystems: true
+
+updates:
+    - package-ecosystem: "github-actions"
+      directory: "/"
+      schedule:
+          interval: "daily"
+
+    - package-ecosystem: "npm"
+      directory: "/"
+      schedule:
+          interval: "daily"
+      versioning-strategy: increase

.github/workflows/Dependabot.yml

@@ -0,0 +1,45 @@
+name: Dependabot
+
+concurrency:
+    group: Dependabot-${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: true
+
+permissions:
+    security-events: write
+    contents: write
+    pull-requests: write
+
+on:
+    workflow_dispatch:
+    pull_request:
+
+jobs:
+    Approve:
+        runs-on: ubuntu-latest
+
+        if: ${{ github.actor == 'dependabot[bot]' }}
+
+        steps:
+            - uses: dependabot/[email protected]
+              with:
+                  github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+            - run: gh pr review --approve "$PR_URL"
+              env:
+                  PR_URL: ${{github.event.pull_request.html_url}}
+                  GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+    Merge:
+        runs-on: ubuntu-latest
+
+        if: ${{ github.actor == 'dependabot[bot]' }}
+
+        steps:
+            - uses: dependabot/[email protected]
+              with:
+                  github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+            - run: gh pr merge --auto --merge "$PR_URL"
+              env:
+                  PR_URL: ${{github.event.pull_request.html_url}}
+                  GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}