Add dependency-shepherd label to dependabot.yml (#133)

Co-authored-by: Emmanuel Ukoha <eukoha@ironarchtec.com>
Co-authored-by: Sarah-Jaine Szekeresh <SarahJaine@users.noreply.github.com>

Author: 3 people

.github/dependabot.yml

@@ -0,0 +1,20 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups: # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
+      breaking:
+        update-types:
+        - "major"
+      nonbreaking: # Group together nonbreaking upgrades
+        update-types:
+        - "minor"
+        - "patch"
+    reviewers:
+      - "ves-event-bus-infra"
+    labels:
+      - "Event Bus"
+      - "dependencies"
+      - "dependency-shepherd"

.github/workflows/publish-docs.yml

@@ -11,11 +11,11 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1
         with:
           python-version: 3.x
-      - uses: actions/cache@v3
+      - uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0
         with:
           key: ${{ github.ref }}
           path: .cache