chore: fine-tune Dependabot for GitHub actions (#295)

Author: dspashynskyi

.github/CODEOWNERS

@@ -1,2 +1,2 @@
-* @vladisavvv
+* @adubovik
 /.github/ @nepalevov @alexey-ban

.github/dependabot.yml

@@ -20,3 +20,15 @@ updates:
     commit-message:
       # Prefix all commit messages with "chore: "
       prefix: "chore"
+    groups:
+      ai-dial-ci:
+        applies-to: version-updates
+        patterns:
+          - "epam/ai-dial-ci/*"
+      github-actions:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "epam/ai-dial-ci/*"
+    open-pull-requests-limit: 10

.github/workflows/dependabot-automation.yml

@@ -0,0 +1,29 @@
+name: Dependabot Automation
+
+on: pull_request_target
+
+permissions: {}
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: |
+      github.event.pull_request.user.login == 'dependabot[bot]' &&
+      github.repository_owner == 'epam'
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b # v2.4.0
+      - name: Approve PR
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.ACTIONS_BOT_TOKEN }}
+      - name: Merge PR
+        if: |
+          steps.metadata.outputs.dependency-group == 'ai-dial-ci' &&
+          steps.metadata.outputs.update-type != 'version-update:semver-major'
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.ACTIONS_BOT_TOKEN }}