ci(github): add workflow dependabot.yml

.github/workflows/build.yml

@@ -1,6 +1,10 @@
 name: build
 on: [push, pull_request]
 
+permissions:
+  pull-requests: write
+  contents: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -13,13 +17,11 @@ jobs:
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
-        with:
-          tools: composer:v2
 
       - name: Install dependencies
         run: composer install --no-interaction --prefer-dist --optimize-autoloader
 
-      - name: Generate code
+      - name: Build library
         run: composer build
 
       - name: Check Git working tree

.github/workflows/dependabot.yml

@@ -0,0 +1,31 @@
+name: dependabot
+on: pull_request_target
+
+permissions:
+  pull-requests: write
+  contents: write
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          submodules: true
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+
+      - name: Install dependencies
+        run: composer install --no-interaction --prefer-dist --optimize-autoloader
+
+      - name: Build library
+        run: composer build
+
+      - name: Git commit and push
+        uses: stefanzweifel/git-auto-commit-action@v4
+        with:
+          commit_message: 'feat: generate lib from braze-specification'

.github/workflows/test.yml

@@ -16,7 +16,6 @@ jobs:
         uses: shivammathur/setup-php@v2
         with:
           php-version: ${{ matrix.php-version }}
-          tools: composer:v2
           coverage: pcov
 
       - name: Install dependencies