Merge pull request #370 from credebl/Feat/dependbot-yaml

Feat: Added Dependbot

Author: shitrerohit

.github/dependabot.yml

@@ -0,0 +1,61 @@
+# .github/dependabot.yml
+
+version: 2
+
+updates:
+  # =========================
+  # Yarn Dependencies (via npm ecosystem)
+  # =========================
+  - package-ecosystem: 'npm' # ← use "npm", not "yarn"
+    directory: '/' # or "/client" if package.json is inside a subfolder
+    target-branch: 'main' # always open PRs against main
+    schedule:
+      interval: 'weekly'
+      day: 'monday'
+      time: '09:00'
+      timezone: 'Asia/Kolkata'
+    open-pull-requests-limit: 10
+
+    groups:
+      minor-updates:
+        patterns:
+          - '*'
+        update-types:
+          - 'minor'
+
+    allow:
+      - dependency-type: 'all'
+
+    labels:
+      - 'dependencies'
+      - 'yarn' # you can keep this label for clarity
+
+    commit-message:
+      prefix: 'chore'
+      include: 'scope'
+
+  # =========================
+  # GitHub Actions
+  # =========================
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    target-branch: 'main' # always open PRs against main
+    schedule:
+      interval: 'weekly'
+      day: 'monday'
+      time: '09:00'
+      timezone: 'Asia/Kolkata'
+
+    labels:
+      - 'dependencies'
+      - 'github-actions'
+
+    commit-message:
+      prefix: 'ci'
+
+    groups:
+      minor-updates:
+        patterns:
+          - '*'
+        update-types:
+          - 'minor'

Dockerfile

@@ -1,5 +1,5 @@
 # Stage 1: Builder stage
-FROM node:22.22.0 AS builder
+FROM node:22.22.2 AS builder
 
 WORKDIR /app
 
@@ -19,7 +19,7 @@ RUN yarn global add patch-package
 RUN yarn build
 
 # Stage 2: Production stage  
-FROM node:22.22.0-slim
+FROM node:22.22.2-slim
 
 # Update system packages and install security updates
 RUN apt-get update && apt-get upgrade -y && \