Onboard dependabot workflows (#47)

.github/dependabot.yml

@@ -1,21 +1,20 @@
 version: 2
 updates:
-- package-ecosystem: gomod
+- package-ecosystem: "gomod"
   directory: "/"
   schedule:
-    interval: daily
-  open-pull-requests-limit: 10
+    interval: "daily"
   labels:
     - "dependencies"
-  commit-message:
-    prefix: "feat"
-    include: "scope"
 - package-ecosystem: "docker"
   directory: "/"
   schedule:
     interval: "weekly"
   labels:
     - "dependencies"
-  commit-message:
-    prefix: "feat"
-    include: "scope"
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    interval: "weekly"
+  labels:
+    - "dependencies"

.github/workflows/approve-dependabot-pr.yml

@@ -0,0 +1,9 @@
+name: Approve dependabot PR
+
+on: pull_request
+
+jobs:
+  approve:
+    uses: adevinta/vulcan-cicd/.github/workflows/reusable-approve-dependabot-pr.yml@v1
+    secrets:
+      PAT: ${{ secrets.DEPENDABOT_AUTOMERGE_TOKEN }}

.github/workflows/release-dependabot-updates.yml

@@ -0,0 +1,18 @@
+name: Release dependabot updates
+
+on:
+
+  # To generate a release on every update
+  # push:
+  #  branches: master
+
+  # To group dependabot updates in the same release
+  schedule:
+    - cron: '30 5 * * *'
+
+  # To allow manual execution
+  workflow_dispatch:
+
+jobs:
+  release:
+    uses: adevinta/vulcan-cicd/.github/workflows/reusable-release-dependabot-updates.yml@v1