ci: plugins: Enable dependabot

src/bin/plugins/checkPlugin.js

@@ -146,6 +146,7 @@ if (autoPush) {
   await Promise.all(workflows.map(async (fn) => {
     await checkFile(`src/bin/plugins/lib/${fn}`, `.github/workflows/${fn}`);
   }));
+  await checkFile('src/bin/plugins/lib/dependabot.yml', '.github/dependabot.yml');
 
   if (!files.includes('package.json')) {
     console.warn('no package.json, please create');

src/bin/plugins/lib/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"