Merge pull request #14 from The-Adimension/ci/dependabot

ci: add Dependabot configuration for pip and GitHub Actions

Author: habanwer

.github/dependabot.yml

@@ -0,0 +1,28 @@
+# ──────────────────────────────────────────────────────────────────────
+# Dependabot — Automated dependency update PRs
+# Monitors pip (Python) and github-actions ecosystems for outdated or
+# vulnerable dependencies and opens PRs automatically.
+# ──────────────────────────────────────────────────────────────────────
+
+version: 2
+
+updates:
+  # Python dependencies (requirements.txt)
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10
+    labels:
+      - dependencies
+      - python
+
+  # GitHub Actions versions
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - github-actions