Add dependabot.yml

[bryophyta]

What does this change?

Adds dependabot config for:

1. Root npm project
2. newswires/client npm project
3. Github actions

I haven't found a good way to test this, as Github will only check the config when it's on main. I've validated it against the published dependabot schema though and that's not flagging any issues.

Given that it shouldn't affect the app itself, I'm inclined to merge and then fix forward as needed, as long as no one can spot obvious issues?

How to test

How can we measure success?

Have we considered potential risks?

Images

Accessibility

• Tested with screen reader
• Navigable with keyboard
• Colour contrast passed
• The change doesn't use only colour to convey meaning

[github-actions]

Deploy build 640 of Editorial Tools::News Wires to CODE

All deployment options

• Deploy build 640 of Editorial Tools::News Wires to CODE
• Deploy parts of build 640 to CODE by previewing it first
• What's on CODE right now?

---

From guardian/actions-riff-raff.

[andrew-nowak]

lgtm, though do we want to resurrect #63 ?

[bryophyta]

lgtm, though do we want to resurrect #63 ?

I think that'd be great! I just had a quick look and it looks like it'll be a bit of work to get it running though? So I'm inclined to merge this for now and then hopefully we can pick #63 up again in a bit?