From b3e3c4e29d5dacf0025044a5790eb9c8296689d5 Mon Sep 17 00:00:00 2001
From: Oliver Klee <typo3-coding@oliverklee.de>
Date: Mon, 23 May 2022 14:45:35 +0200
Subject: [PATCH] [FEATURE] Add a Dependabot action for updating GitHub actions
 (#452)

With this configuration, GitHub's Dependabot will create PR
to update the versions of the GitHub Actions we are using in
our CI pipeline.
---
 .github/dependabot.yml | 9 +++++++++
 CHANGELOG.md           | 1 +
 2 files changed, 10 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..cf32dfe
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,9 @@
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    milestone: 5
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2a21a64..98560a4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 ## x.y.z
 
 ### Added
+- Add a Dependabot action for updating GitHub actions (#452)
 - Use Coveralls for the code coverage (#425)
 
 ### Changed