This PR adds Dependabot configuration to automatically monitor and recommend dependency updates on a weekly schedule.

What's Added

• .github/dependabot.yml - Comprehensive Dependabot configuration that monitors:
  • NuGet packages in the main library (/src/NLWebNet)
  • NuGet packages in the demo application (/demo)
  • NuGet packages in test projects (/tests)
  • GitHub Actions workflows (/.github/workflows)

Configuration Details

• Weekly scanning every Monday at 09:00 UTC
• Appropriate PR limits to prevent spam (5 for main library, 3 for demo/tests, 2 for actions)
• Organized labeling with dependencies, nuget, and component-specific labels
• Structured commit messages with prefixes like deps, deps(demo), deps(tests), deps(actions)
• Reviewer assignment to maintain code quality
• Targets main branch for updates

Benefits

This complements the existing security scanning in the CI/CD pipeline by:

• Proactively identifying available dependency updates
• Creating organized pull requests for review
• Maintaining up-to-date dependencies for security and performance
• Reducing manual dependency management overhead

Dependabot will start monitoring after this PR is merged and will create its first batch of update PRs on the next scheduled Monday.

Fixes #8.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.