chore: enable Dependabot for dependency upgrades (#1836)

Author: ianbotsf

.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: gradle
+    directory: /
+    schedule:
+      interval: daily # means every _weekday_ (Monday through Friday)
+    open-pull-requests-limit: 100

.github/workflows/api-compat-verification.yml

@@ -7,15 +7,15 @@ on:
       - main
       - '*-main'
 
-permissions: { }
+permissions:
+  contents: read
 
 jobs:
   api-compat-verification:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
         with:
-          token: ${{ secrets.CI_USER_PAT }}
           fetch-depth: 0
       - name: Check for API compatibility
         if: ${{ !contains(github.event.pull_request.labels.*.name, 'acknowledge-api-break') }}

.github/workflows/changelog-verification.yml

@@ -1,6 +1,7 @@
 name: Changelog verification
 
 permissions:
+  contents: read
   id-token: write
 
 on:

.github/workflows/e2e-tests.yml

@@ -4,6 +4,14 @@ on:
   pull_request:
   workflow_dispatch:
 
+concurrency:
+  group: e2e-tests-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   e2e-tests:
     runs-on: ubuntu-latest
@@ -30,12 +38,3 @@ jobs:
             echo "Cancelling in-progress build: $BUILD_ID"
             aws codebuild stop-build --id $BUILD_ID
           fi
-
-concurrency:
-  group: e2e-tests-${{ github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  id-token: write
-  contents: read
-

.github/workflows/release-metrics.yml

@@ -4,6 +4,10 @@ on:
   release:
     types: [ published ]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build-sdk:
     runs-on: ubuntu-latest
@@ -25,7 +29,3 @@ jobs:
           project-name: aws-sdk-kotlin-service-build
           source-version-override: ${{ github.ref }}
           env-vars-for-codebuild: GITHUB_REPOSITORY, UPLOAD, RELEASE_METRICS, IDENTIFIER
-
-permissions:
-  id-token: write
-  contents: read

.github/workflows/release-readiness.yml

@@ -8,7 +8,8 @@ on:
     types: [ opened, synchronize, reopened, labeled, unlabeled ]
     branches: [ main ]
 
-permissions: { }
+permissions:
+  contents: read
 
 jobs:
   release-readiness:

.github/workflows/service-ci.yml

@@ -4,6 +4,14 @@ on:
   pull_request:
   workflow_dispatch:
 
+concurrency:
+  group: service-ci-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build-sdk:
     runs-on: ubuntu-latest
@@ -41,11 +49,3 @@ jobs:
             echo "Cancelling in-progress build: id=$BUILD_ID"
             aws codebuild stop-build --id $BUILD_ID
           fi
-
-concurrency:
-  group: service-ci-${{ github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  id-token: write
-  contents: read