Merge pull request #1 from CRUKorg/add-dependabot

add dependabot yml

.github/dependabot-auto-merge.yml

@@ -0,0 +1,24 @@
+name: "Dependabot auto merge"
+
+on:
+  pull_request:
+    branches:
+      - "*"
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+jobs:
+  dependabot-auto-merge:
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: approve Dependabot PR
+        run: |
+          gh pr review --approve ${{ github.event.pull_request.html_url }} --body "Auto approved by CI"
+      - name: Enable auto-merge for Dependabot PRs
+        run: |
+          gh pr merge --auto --squash ${{ github.event.pull_request.html_url }}

.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    open-pull-requests-limit: 5
+    schedule:
+      interval: daily