chore: setup dependabot auto-updates and set exports

Author: YasharF

.github/FUNDING.yml

@@ -0,0 +1,27 @@
+version: 2
+updates:
+  # Dependency updates weekly batched by semver
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "00:00" # UTC
+    open-pull-requests-limit: 10
+    versioning-strategy: increase
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+
+  # GitHub Actions updates monthly
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "wednesday"
+      time: "01:00"
+    open-pull-requests-limit: 3
+
+    commit-message:
+      prefix: "chore"
+      include: "scope"

.github/dependabot.yml

@@ -3,19 +3,22 @@ on:
     branches:
       - master
   pull_request:
-    types: [assigned, opened, synchronize, reopened, labeled]
+    branches:
+      - master
   workflow_dispatch:
+permissions:
+  contents: read
 name: ci
 jobs:
   test:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
-        node: [18, 20]
+        node: [22, 24]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           cache: npm
@@ -25,11 +28,29 @@ jobs:
   windows:
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: lts/*
           cache: npm
       - run: npm config set update-notifier false
       - run: npm ci
       - run: npm test
+  dependabot-automerge:
+    needs: [test, windows]
+    if: >
+      github.event_name == 'pull_request' &&
+      github.event.pull_request.user.login == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Automerge Dependabot PRs if all checks have passed
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh pr merge --squash ${{ github.event.pull_request.number }}