Merge pull request #19 from gluecode-it/dependabot

fix: adds dependabot

.github/auto-merge.yml

@@ -0,0 +1,7 @@
+- match:
+    dependency_name: gluecode-it\/.+
+    dependency_type: all
+    update_type: "security:minor"
+- match:
+    dependency_type: developement
+    update_type: "semver:minor"

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    open-pull-requests-limit: 999
+    versioning-strategy: increase
+    directory: "/"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-type: "development"
+      - dependency-name: "gluecode-it*"
+        dependency-type: "production"

.github/settings.yml

@@ -0,0 +1,23 @@
+repository:
+  has_issues: true
+  has_wiki: false
+  has_downloads: true
+  default_branch: master
+  allow_squash_merge: true
+  allow_merge_commit: true
+  allow_rebase_merge: true
+branches:
+  - name: master
+    protection:
+      required_pull_request_reviews:
+        required_approving_review_count: 1
+        dismiss_stale_reviews: true
+        require_code_owner_reviews: true
+      required_status_checks:
+        strict: true
+        contexts: []
+      enforce_admins: true
+      restrictions:
+        apps: []
+        users: []
+        teams: []

.github/workflows/dependabot-auto-merge.yml

@@ -0,0 +1,13 @@
+name: Auto merge
+
+on:
+  pull_request:
+
+jobs:
+  automerge:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: ahmadnassri/action-dependabot-auto-merge@v2
+      with:
+        target: patch
+        github-token: ${{ secrets.GH_PAT }}