Implement dependency version tracker

[intuibase]

We need a tool which will track our dependencies from packagist and notify us about new releases (create issues?) or bump up versions automatically (unsafe).

[v1v]

Hi @intuibase , I've just found this; I wonder whether we can use dependabot, it supports packagist:

• https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

For instance, https://github.com/elastic/opbeans-php/blob/feb6c9309ac367dda161ed2e6831b3792a251175/.github/dependabot.yml#L2-L14

It works and it creates PRs such as:

• Update phpunit/phpunit requirement from ^9.5.10 to ^11.4.4 opbeans-php#81

) or bump up versions automatically (unsafe).

What's the reason you said unsafe?

[intuibase]

It looks like using dependabot is a best solution, but not for now because we're lack of tests
We need to merge testing framework -then we can rely on them to confirm if package upgrade is successful.
I'll keep issue open until we will be ready and make use dependabot