Merge branch 'dependabot' into 'main'

chore: add dependabot config

See merge request unboundsoftware/shiny/authz_client!4

.gitlab-ci.yml

@@ -1,5 +1,7 @@
 include:
-  - template: 'Workflows/MergeRequest-Pipelines.gitlab-ci.yml'
+- template: 'Workflows/MergeRequest-Pipelines.gitlab-ci.yml'
+- project: 'unboundsoftware/dependabot-staged-flow'
+  file: '.gitlab-ci.yml'
 
 image: golang:1.15
 
@@ -7,26 +9,35 @@ variables:
   GOFLAGS: -mod=readonly
 
 stages:
-  - deps
+- deps
-  - test
+- test
+- dependabot
+
+.exclude_from_schedule: &not_on_schedule
+  rules:
+  - if: $CI_PIPELINE_SOURCE == "schedule"
+    when: never
+  - when: always
 
 deps:
+  <<: *not_on_schedule
   stage: deps
   script:
-    - go mod download
+  - go mod download
 
 test:
+  <<: *not_on_schedule
   stage: test
   dependencies:
-    - deps
+  - deps
   script:
-    - go fmt $(go list ./...)
+  - go fmt $(go list ./...)
-    - go vet $(go list ./...)
+  - go vet $(go list ./...)
-    - CGO_ENABLED=1 go test -mod=readonly -race -coverprofile=coverage.txt -covermode=atomic -coverpkg=$(go list ./... | tr '\n' , | sed 's/,$//') ./...
+  - CGO_ENABLED=1 go test -mod=readonly -race -coverprofile=coverage.txt -covermode=atomic -coverpkg=$(go list ./... | tr '\n' , | sed 's/,$//') ./...
-    - go tool cover -html=coverage.txt -o coverage.html
+  - go tool cover -html=coverage.txt -o coverage.html
-    - go tool cover -func=coverage.txt
+  - go tool cover -func=coverage.txt
-    - bash <(curl -s https://codecov.io/bash)
+  - bash <(curl -s https://codecov.io/bash)
   artifacts:
     paths:
-      - coverage.html
+    - coverage.html
-      - coverage.txt
+    - coverage.txt

.gitlab/dependabot.yml

@@ -0,0 +1,12 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+- package-ecosystem: "gomod"
+  directory: "/"
+  schedule:
+    interval: "daily"
+  open-pull-requests-limit: 20