Auto-deploy dependabot config

[Stebalien]

Dependabot is now configured through .github/dependabot.yml. We should deploy this in at least some of our repos.

[marten-seemann]

Can you paste a sample config file here? Do we need this config file in all participating (Go) repos, or do we need a config option for that in config.json?

[Stebalien]

.github/dependabot.yml

version: 2
updates:
- package-ecosystem: gomod
 directory: "/"
 schedule:
 interval: daily
 time: "11:00"
 open-pull-requests-limit: 10
 labels:
 - "topic/dependencies"

And yeah... we need a config file in all participating go repos.

[marten-seemann]

And yeah... we need a config file in all participating go repos.

Good, that simplifies things a bit for now.

What doesn't simplify things is that the path is .github/dependabot.yml. Currently, the copy workflow assumes that all files go to .github/workflows/.
I think we should change the directory structure here a bit, to make it work in the general case. We could rewrite the workflow such that it copies all files from templates/A/B/C.xyz in this repo to A/B/C.xyz in the target repo.

[Stebalien]

Yeah, that sounds like a good idea.

[galargh]

We're going to revisit this as part of pl-strflt/ipdx#91. Now that we have more tools at our disposal, more configurable Unified CI - https://github.com/pl-strflt/uci - and GitHub Management - https://github.com/protocol/github-mgmt-router - it should be easier to carry out.