Add Dependabot

.github/CODEOWNERS

@@ -0,0 +1 @@
+*   @luketainton

.github/dependabot.yml

@@ -0,0 +1,44 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    assignees:
+      - "luketainton"
+    reviewers:
+      - "luketainton"
+    commit-message:
+      prefix: "chore(actions)"
+      include: "scope"
+    labels:
+      - "dependencies"
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    assignees:
+      - "luketainton"
+    reviewers:
+      - "luketainton"
+    commit-message:
+      prefix: "chore(docker)"
+      include: "scope"
+    labels:
+      - "dependencies"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    assignees:
+      - "luketainton"
+    reviewers:
+      - "luketainton"
+    commit-message:
+      prefix: "chore(pip-prod)"
+      prefix-development: "chore(pip-dev)"
+      include: "scope"
+    labels:
+      - "dependencies"

.github/renovate.json

@@ -0,0 +1,47 @@
+{
+  "extends": [
+    "config:base",
+    ":semanticCommits",
+    ":semanticCommitTypeAll(fix)"
+  ],
+  "baseBranches": [
+    "next"
+  ],
+  "platformCommit": true,
+  "dependencyDashboardAutoclose": true,
+  "assignAutomerge": true,
+  "assigneesFromCodeOwners": true,
+  "rebaseWhen": "behind-base-branch",
+  "rollbackPrs": true,
+  "labels": [
+    "dependencies"
+  ],
+  "packageRules": [
+    {
+      "matchPackagePatterns": [
+        "black",
+        "pylint"
+      ],
+      "labels": [
+        "linting"
+      ]
+    },
+    {
+      "matchPackagePatterns": [
+        "coverage",
+        "pytest"
+      ],
+      "labels": [
+        "unit-tests"
+      ]
+    }
+  ],
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "labels": [
+      "security"
+    ],
+    "commitMessagePrefix": "[SECURITY] ",
+    "prCreation": "immediate"
+  }
+}

.github/workflows/ci.yml

@@ -6,8 +6,9 @@ on:
       - "README.md"
       - "LICENSE.md"
       - ".gitignore"
-      - "CODEOWNERS"
-      - "renovate.json"
+      - ".github/CODEOWNERS"
+      - ".github/renovate.json"
+      - ".github/dependabot.yml"
 
 jobs:
   pythonci:

.github/workflows/release.yml

@@ -48,5 +48,5 @@ jobs:
         with:
           url: ${{ secrets.PORTAINER_WEBHOOK_URL }}
           method: POST
-          timeout: 30000
+          timeout: 60000
           preventFailureOnNoResponse: "true"