Add Dependabot

Author: hyperxpro

.github/dependabot.yml

@@ -0,0 +1,25 @@
+version: 2
+
+# Dependabot configuration: checks for dependency updates on a daily basis.
+# You can adjust the package-ecosystem entries or add more as needed (e.g. "github-actions").
+# See https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
+updates:
+  - package-ecosystem: "maven"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 1
+    groups:
+      dependencies:
+        patterns:
+          - "*"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 1
+    groups:
+      actions:
+        patterns:
+          - "*"

.github/workflows/dependabot.yml

@@ -0,0 +1,20 @@
+name: "Dependabot periodic run"
+
+on:
+  schedule:
+    # every day at midnight UTC; adjust as needed
+    - cron: '0 0 * * *'
+  workflow_dispatch: {}    # allows manual triggering
+
+jobs:
+  notify:
+    name: Notify about Dependabot schedule
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v6
+      - name: Log message
+        run: |
+          echo "This workflow is intended to accompany the dependabot config."
+          echo "Dependabot itself is managed by the service using .github/dependabot.yml."
+          echo "It will run daily and can also be triggered manually via the 'Run workflow' button."