chore: replace renovate with dependabot (#57)

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'monthly'
+
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'monthly'
+    groups:
+      upload-download-artifact:
+        patterns:
+          - 'actions/upload-artifact'
+          - 'actions/download-artifact'

.github/workflows/ci.yml

@@ -1,26 +1,45 @@
----
 name: CI
 on:
   push:
     branches:
       - master
   pull_request:
 
+env:
+  CI: true
+
 jobs:
-  build:
+  test-and-build:
+    name: 'Test and build'
     runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v4
 
-      - name: Use Node.js 16.15
-        uses: actions/setup-node@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: '16.15'
+          node-version-file: '.nvmrc'
 
       - run: npm ci
 
-      - name: Upload code coverage
-        uses: coverallsapp/github-action@master
+      - uses: actions/upload-artifact@v4
+        with:
+          name: code-coverage
+          path: coverage
+
+  upload-code-coverage:
+    name: 'Upload code coverage'
+    needs: ['test-and-build']
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: code-coverage
+          path: coverage
+
+      - uses: coverallsapp/github-action@v2
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/dependabot-auto-merge.yml

@@ -0,0 +1,15 @@
+name: Dependabot auto merge
+
+on:
+  pull_request:
+
+jobs:
+  dependabot-auto-merge:
+    name: 'Dependabot auto merge'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ahmadnassri/action-dependabot-auto-merge@v2
+        with:
+          target: minor
+          github-token: ${{ secrets.READ_AND_WRITE_TOKEN }}