feat[dependabot]: gh actions, typescript, dotenv (#152)

- @typescript-eslint/typescript-estree doesn't support typescript >= 5.6.0, hold it back
- allow updating of dotenv
- enable dependabot for GitHub Actions

.github/dependabot.yml

@@ -1,12 +1,22 @@
 # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
 version: 2
 updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    assignees:
+      - "ralphorama"
+    schedule:
+      interval: "weekly"
+      time: "18:00"
+      timezone: "America/New_York"
+    commit-message:
+      prefix: "github actions"
   - package-ecosystem: "npm"
     directory: "/"
     assignees:
       - "ralphorama"
     schedule:
-      interval: "monthly"
+      interval: "weekly"
       time: "18:00"
       timezone: "America/New_York"
     groups:
@@ -21,7 +31,9 @@ updates:
           - "minor"
           - "patch"
     ignore:
-      - dependency-name: "dotenv"
+      # hold back typescript for @typescript-eslint/typescript-estree
+      - dependency-name: "typescript"
+        versions: ">= 5.6.0"
       # Not sure why dependabot keeps trying to bump stuff by major versions
       # but it's ticking me off!!
       - dependency-name: "*"

package.json

@@ -52,7 +52,7 @@
     "@tsconfig/node-lts": "^20.1.3",
     "@types/node": "^20.14.11",
     "discord.js": "^14.16.3",
-    "dotenv": "16.3.1",
+    "dotenv": "^16.4.5",
     "i18next": "^23.16.2",
     "i18next-fs-backend": "^2.3.2",
     "typescript": "<5.6.0",