Onboard dependabot workflows (#287)

Generated by https://github.com/adevinta/vulcan-cicd/actions/runs/7928803135

Co-authored-by: purple-team-service-user <[email protected]>

.github/dependabot.yml

@@ -1,12 +1,17 @@
 version: 2
 updates:
-- package-ecosystem: gomod
+- package-ecosystem: "gomod"
   directory: "/"
   schedule:
-    interval: daily
-  open-pull-requests-limit: 10
+    interval: "daily"
+  ignore:
+  - dependency-name: "github.com/aws/aws-sdk-go"
+    update-types: ["version-update:semver-patch"]
+  labels:
+    - "dependencies"
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    interval: "weekly"
   labels:
     - "dependencies"
-  commit-message:
-    prefix: "feat"
-    include: "scope"

.github/workflows/approve-dependabot-pr.yml

@@ -0,0 +1,9 @@
+name: Approve dependabot PR
+
+on: pull_request
+
+jobs:
+  approve:
+    uses: adevinta/vulcan-cicd/.github/workflows/reusable-approve-dependabot-pr.yml@v1
+    secrets:
+      PAT: ${{ secrets.DEPENDABOT_AUTOMERGE_TOKEN }}

.github/workflows/release-dependabot-updates.yml

@@ -0,0 +1,18 @@
+name: Release dependabot updates
+
+on:
+
+  # To generate a release on every update
+  # push:
+  #  branches: master
+
+  # To group dependabot updates in the same release
+  schedule:
+    - cron: '30 5 * * *'
+
+  # To allow manual execution
+  workflow_dispatch:
+
+jobs:
+  release:
+    uses: adevinta/vulcan-cicd/.github/workflows/reusable-release-dependabot-updates.yml@v1