Feature/dependabot

[Nielsvanpach]

This action uses Dependabot to keep all other actions dependencies up to date with the latest version.

Source: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/keeping-your-actions-up-to-date-with-dependabot

Current issue: 'on' and 'jobs' are missing, but not mentioned in the docs.

[patinthehat]

@Nielsvanpach I think you're mixing workflows and the dependabot configuration file. Check out the dependabot setup I PR'd (now merged) into spatie/package-skeleton-php:

Config file: spatie/package-skeleton-php/.github/dependabot.yml Workflow: spatie/package-skeleton-php/.github/workflows/dependabot-auto-merge.yml Commit: spatie/package-skeleton-php/commit/caa9ba2a

[freekmurze]

Closing for now.