Merge pull request #10 from openHPI/dependabot

Add dependabot auto updates

.github/auto-merge.yml

@@ -0,0 +1,11 @@
+- match:
+    dependency_type: all
+    update_type: security:minor # includes patch updates!
+
+- match:
+    dependency_type: development
+    update_type: semver:minor # includes patch updates!
+
+- match:
+    dependency_type: production
+    update_type: semver:patch

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+
+updates:
+  - package-ecosystem: gomod
+    directory: "/"
+    schedule:
+      interval: daily
+      time: "03:00"
+      timezone: UTC
+    labels:
+      - dependencies

.github/workflows/dependabot.yml

@@ -0,0 +1,15 @@
+name: Dependabot Automerge Check
+on:
+  - pull_request_target
+
+jobs:
+  auto-merge:
+    if: github.actor == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+      - name: Automerge dependabot dependencies
+        uses: ahmadnassri/action-dependabot-auto-merge@v2
+        with:
+          github-token: ${{ secrets.OPENHPI_BOT_TOKEN }}