update dependabot to auto bump deps and enable CVE detect

charles-chenzz · charles-chenzz · commit a7e065ddb42f · 2023-10-03T20:16:56.000+08:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,3 +4,11 @@ updates:
   directory: "/"
   schedule:
       interval: "weekly"
+
+- package-ecosystem: gomod
+  directory: "/"
+  schedule:
+    interval: "weekly"
+  open-pull-requests-limit: 10
+  vulnerability-alerts:
+    enabled: true
