Enable dependabot

.github/dependabot.yml

@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "composer"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    versioning-strategy: "increase"
+    open-pull-requests-limit: 10
+    allow:
+      - dependency-type: "development"
+    ignore:
+      - dependency-name: "nette/bootstrap"
+      - dependency-name: "nette/di"
+      - dependency-name: "nette/http"
+      - dependency-name: "nette/caching"

.github/workflows/dependabot.yaml

@@ -0,0 +1,21 @@
+name: "Dependabot"
+
+on:
+  pull_request_target:
+
+jobs:
+  auto_merge:
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    runs-on: ubuntu-latest
+    name: "Auto merge"
+    steps:
+      - uses: actions/github-script@v3
+        with:
+          github-token: ${{secrets.PERSONAL_REPO_TOKEN}}
+          script: |
+            github.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              body: '@dependabot squash and merge'
+            })