ci: add dependabot and bump actions versions (#701)

* ci: Add Dependabot (#48)

* ci: Add Dependabot for Github actions

* ci: Add Dependabot for npm packages

* build(deps): bump pre-commit/action from 2.0.3 to 3.0.0 (#23)

* build(deps): bump actions/checkout from 2 to 4 (#24)

* build(deps): bump github/codeql-action from 1 to 2 (#22)

* build(deps): bump actions/setup-node from 2 to 3 (#21)

---------

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sekwah <[email protected]>

Author: 3 people

.github/dependabot.yml

@@ -0,0 +1,58 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    open-pull-requests-limit: 5
+    schedule:
+      day: saturday
+      interval: weekly
+  # app
+  - package-ecosystem: npm
+    directory: /
+    open-pull-requests-limit: 5
+    schedule:
+      interval: daily
+    groups:
+      app-development-dependencies:
+        dependency-type: "development"
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+      app-production-dependencies:
+        dependency-type: "production"
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - version-update:semver-major
+  # website
+  - package-ecosystem: npm
+    directory: /website
+    open-pull-requests-limit: 5
+    schedule:
+      interval: daily
+    groups:
+      website-development-dependencies:
+        dependency-type: "development"
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+      website-production-dependencies:
+        dependency-type: "production"
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - version-update:semver-major

.github/workflows/website-deploy.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Use Node.js 18.x
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v3
         with:
           node-version: 18.x
           cache: "yarn"