ci: added dependabot.yml #1091

[priyankarpal]

Description

• Added dependabot gh action

• Fixes ✨ [Feature request]: Add dependabot gh action #1091

Type of change

Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

How Has This Been Tested?

It's a gh action. It will update all gh actions if an update is needed.

Checklist:

• I have performed a self-review of my own code
• I have commented on my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules

Screenshots or example output

[vercel]

@priyankarpal is attempting to deploy a commit to a Personal Account owned by @reactplay on Vercel.

@reactplay first needs to authorize it.

[github-actions]

Hey! contributor, thank you for opening a Pull Request 🎉.

@reactplay/maintainers will review your submission soon and give you helpful feedback. If you're interested in continuing your contributions to open source and want to be a part of a welcoming and fantastic community, we invite you to join our [ReactPlay Discord Community](https://discord.gg/vrTxWUP8Am). Show your support by starring ⭐ this repository. Thank you and we appreciate your contribution to open source! **Stale Marking** : **After 30 days of inactivity this issue/PR will be marked as stale issue/PR and it will be closed and locked in 7 days if no further activity occurs.**

[Sachin-chaurasiya]

Hello @priyankarpal , Thanks for the PR, It would be great if you share some examples of how it will be working and what will be the benefits of adding this.

[priyankarpal]

Hello @priyankarpal, Thanks for the PR, It would be great if you share some examples of how it will be working and what will be the benefits of adding this.

Dependabot is a tool that helps you keep your software dependencies up-to-date by automatically checking for updates and creating pull requests to update them.

[Sachin-chaurasiya]

Hello @priyankarpal, Thanks for the PR, It would be great if you share some examples of how it will be working and what will be the benefits of adding this.

Dependabot is a tool that helps you keep your software dependencies up-to-date by automatically checking for updates and creating pull requests to update them.

Will it also mention the vulnerabilities?

[priyankarpal]

Hello @priyankarpal, Thanks for the PR, It would be great if you share some examples of how it will be working and what will be the benefits of adding this.

Dependabot is a tool that helps you keep your software dependencies up-to-date by automatically checking for updates and creating pull requests to update them.

Will it also mention the vulnerabilities?

No, this code does not check vulnerabilities directly.

This code appears to update the package ecosystem for GitHub Actions and schedule a daily update. However, it does not specify any specific tools or methods for checking vulnerabilities in the packages used in the repository or in the GitHub Actions workflow.

To check for vulnerabilities, you will need to use additional tools and services that can scan your code for known vulnerabilities in the packages you are using.

[Sachin-chaurasiya]

Hello @priyankarpal, Thanks for the PR, It would be great if you share some examples of how it will be working and what will be the benefits of adding this.

Dependabot is a tool that helps you keep your software dependencies up-to-date by automatically checking for updates and creating pull requests to update them.

Will it also mention the vulnerabilities?

No, this code does not check vulnerabilities directly.

This code appears to update the package ecosystem for GitHub Actions and schedule a daily update. However, it does not specify any specific tools or methods for checking vulnerabilities in the packages used in the repository or in the GitHub Actions workflow.

To check for vulnerabilities, you will need to use additional tools and services that can scan your code for known vulnerabilities in the packages you are using.

@priyankarpal , It would be great to have some working examples.

[priyankarpal]

Hello @priyankarpal, Thanks for the PR, It would be great if you share some examples of how it will be working and what will be the benefits of adding this.

Dependabot is a tool that helps you keep your software dependencies up-to-date by automatically checking for updates and creating pull requests to update them.

Will it also mention the vulnerabilities?

No, this code does not check vulnerabilities directly.
This code appears to update the package ecosystem for GitHub Actions and schedule a daily update. However, it does not specify any specific tools or methods for checking vulnerabilities in the packages used in the repository or in the GitHub Actions workflow.
To check for vulnerabilities, you will need to use additional tools and services that can scan your code for known vulnerabilities in the packages you are using.

@priyankarpal , It would be great to have some working examples.

Dependabot will automatically create a PR if there are any updates needed. You can check the example of my project

PR link: priyankarpal/projectshut#92

[Sachin-chaurasiya]

Hello @priyankarpal, Thanks for the PR, It would be great if you share some examples of how it will be working and what will be the benefits of adding this.

Dependabot is a tool that helps you keep your software dependencies up-to-date by automatically checking for updates and creating pull requests to update them.

Will it also mention the vulnerabilities?

No, this code does not check vulnerabilities directly.
This code appears to update the package ecosystem for GitHub Actions and schedule a daily update. However, it does not specify any specific tools or methods for checking vulnerabilities in the packages used in the repository or in the GitHub Actions workflow.
To check for vulnerabilities, you will need to use additional tools and services that can scan your code for known vulnerabilities in the packages you are using.

@priyankarpal , It would be great to have some working examples.

Dependabot will automatically create a PR if there are any updates needed. You can check the example of my project

PR link: priyankarpal/ProjectsHut#92

Thanks for sharing the example, looks good.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
react-play	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 4, 2023 9:12am

[Sachin-chaurasiya]

Left a few comments, thanks

[Sachin-chaurasiya]

Looks Good 👍