ci: add @dependabot config

Signed-off-by: Lexus Drumgold <[email protected]>

Author: unicornware

.github/dependabot.yml

@@ -0,0 +1,36 @@
+# Dependabot Configuration
+#
+# References:
+#
+# - https://docs.github.com/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: ci
+      include: scope
+    labels:
+      - scope:dependencies
+      - type:ci
+    reviewers:
+      - flex-development/dependabot-review
+      - flexdevelopment
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: build
+      include: scope
+    ignore:
+      - dependency-name: typescript
+    labels:
+      - scope:dependencies
+      - type:build
+    reviewers:
+      - flex-development/dependabot-review
+      - flexdevelopment