add dependabot updates for GitHub Actions, Go modules, Dockerfile

.github/dependabot.yml

@@ -0,0 +1,37 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ interval: "monthly"
+ groups:
+ "GitHub Actions updates":
+ patterns:
+ - "*"
+ - package-ecosystem: "docker"
+ directory: "/"
+ schedule:
+ interval: "monthly"
+ - package-ecosystem: "gomod"
+ directory: "/"
+ schedule:
+ interval: "monthly"
+ groups:
+ "Go modules updates":
+ dependency-type: "production"
+ "Go modules updates for tests":
+ dependency-type: "development"
+ - package-ecosystem: "gomod"
+ directory: "/_examples/simplechat"
+ schedule:
+ interval: "monthly"
+ groups:
+ "Go modules updates":
+ dependency-type: "production"
+ "Go modules updates for tests":
+ dependency-type: "development"

Dockerfile

@@ -4,8 +4,6 @@ ARG GIT_BRANCH
 ARG GITHUB_SHA
 ARG CI
 
-ENV GOFLAGS="-mod=vendor"
-
 ADD . /build
 WORKDIR /build
 
@@ -20,6 +18,8 @@ RUN \
 
 
 FROM alpine:3.19
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#docker
+LABEL org.opencontainers.image.source="https://github.com/umputun/tg-spam"
 ENV TGSPAM_IN_DOCKER=1
 RUN apk add --no-cache tzdata
 COPY --from=build /build/tg-spam /srv/tg-spam