[DOP-25347] Setup Dependabot

Author: dolfinus

.github/dependabot.yml

@@ -0,0 +1,40 @@
+# Set update schedule for GitHub Actions
+
+version: 2
+updates:
+    - package-ecosystem: github-actions
+      directory: /
+      schedule:
+          interval: weekly
+      labels:
+          - type:ci
+      # https://til.simonwillison.net/github/dependabot-python-setup
+      groups:
+          github-actions:
+              patterns:
+                  - "*"
+
+    - package-ecosystem: "docker"
+      directory: docker/
+      schedule:
+          interval: "weekly"
+      # https://til.simonwillison.net/github/dependabot-python-setup
+      groups:
+          docker:
+              patterns:
+                  - "*"
+
+    - package-ecosystem: npm
+      directory: /
+      schedule:
+          interval: weekly
+      labels:
+          - type:dependency
+      # https://til.simonwillison.net/github/dependabot-python-setup
+      groups:
+          npm-packages:
+              patterns:
+                  - "*"
+      ignore:
+          - dependency-name: "*"
+            update-types: ["version-update:semver-major"]

.github/labels.yml

@@ -0,0 +1,57 @@
+# config for https://github.com/marketplace/actions/github-labeler
+
+- name: attention:help wanted
+  description: Extra attention is needed
+  color: bfdadc
+  from_name: help wanted
+
+- name: attention:invalid
+  description: This doesn't seem right
+  color: ea2357
+  from_name: invalid
+
+- name: kind:bug
+  description: Something isn't working
+  color: d73a4a
+  from_name: bug
+
+- name: kind:feature
+  description: New feature or request
+  color: 389a3f
+
+- name: kind:improvement
+  description: Improvement of some existing feature
+  color: 1a92c2
+  from_name: enhancement
+
+- name: kind:question
+  description: Further information is requested
+  color: 0e857c
+  from_name: question
+
+- name: resolution:duplicate
+  description: This issue or pull request already exists
+  color: cfd3d7
+  from_name: duplicate
+
+- name: resolution:wontfix
+  description: This will not be worked on
+  color: ec103b
+  from_name: wontfix
+
+- name: type:ci
+  description: CI-related changes
+  color: cdb0bd
+
+- name: type:dependency
+  description: Dependency-related changes
+  color: 214efe
+
+- name: type:documentation
+  description: Improvements or additions to documentation
+  color: 6b9f54
+  from_name: documentation
+
+- name: type:tests
+  description: Tests-related changes
+  color: 5cca5b

.github/workflows/automerge.yml

@@ -0,0 +1,27 @@
+name: Automerge
+
+on:
+    pull_request_target:
+
+jobs:
+    automerge:
+        name: Enable pull request automerge
+        runs-on: ubuntu-latest
+        if: github.event.pull_request.user.login == 'pre-commit-ci[bot]' || github.event.pull_request.user.login == 'dependabot[bot]'
+
+        steps:
+            - uses: alexwilson/[email protected]
+              with:
+                  github-token: ${{ secrets.AUTOMERGE_TOKEN }}
+                  merge-method: REBASE
+
+    autoapprove:
+        name: Automatically approve pull request
+        needs: [automerge]
+        runs-on: ubuntu-latest
+        if: github.event.pull_request.user.login == 'pre-commit-ci[bot]' || github.event.pull_request.user.login == 'dependabot[bot]'
+
+        steps:
+            - uses: hmarr/auto-approve-action@v4
+              with:
+                  github-token: ${{ secrets.AUTOMERGE_TOKEN }}

.github/workflows/repo-labels-sync.yml

@@ -0,0 +1,28 @@
+name: Repo labels sync
+
+on:
+    push:
+        branches:
+            - develop
+        paths:
+            - .github/labels.yml
+            - .github/workflows/repo-labels-sync.yml
+    pull_request:
+        paths:
+            - .github/labels.yml
+            - .github/workflows/repo-labels-sync.yml
+    workflow_dispatch:
+
+jobs:
+    labeler:
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout
+              uses: actions/checkout@v4
+
+            - name: Run Labeler
+              uses: crazy-max/ghaction-github-labeler@v5
+              with:
+                  github-token: ${{ secrets.GITHUB_TOKEN }}
+                  yaml-file: .github/labels.yml
+                  dry-run: ${{ github.event_name == 'pull_request' }}

docker/Dockerfile

@@ -2,7 +2,7 @@
 # Use amd64 for building .js and .css (which are platform agnostic),
 # and then copy to platform-specific nginx image
 
-FROM --platform=linux/amd64 node:23.10.0 AS build
+FROM --platform=linux/amd64 node:23.11.0 AS build
 
 WORKDIR /app