Adds Dependabot configuration and updates the Sync command to copy the dependabot.yml file.

Signed-off-by: Felipe Sayão Lobato Abreu <github@mentordosnerds.com>

Author: coisa

.github/dependabot.yml

@@ -0,0 +1,23 @@
+version: 2
+updates:
+  - package-ecosystem: "composer"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "Composer"
+      include: "scope"
+    labels:
+      - "composer"
+      - "dependencies"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "GitHub Actions"
+      include: "scope"
+    labels:
+      - "github-actions"
+      - "continuous-integration"

bin/dev-tools.php

@@ -18,10 +18,12 @@
 
 namespace FastForward\DevTools;
 
+use Symfony\Component\Console\Input\ArgvInput;
+
 $projectVendorAutoload = \dirname(__DIR__, 4) . '/vendor/autoload.php';
 $pluginVendorAutoload = \dirname(__DIR__) . '/vendor/autoload.php';
 
 require_once file_exists($projectVendorAutoload) ? $projectVendorAutoload : $pluginVendorAutoload;
 
 $application = new DevTools();
-$application->run();
+$application->run(new ArgvInput([...$argv, '--no-plugins']));

src/Command/SyncCommand.php

@@ -26,6 +26,8 @@
 use Symfony\Component\Finder\Finder;
 use Symfony\Component\Process\Process;
 
+use function Safe\file_get_contents;
+
 /**
  * Represents the command responsible for installing development scripts into `composer.json`.
  * This class MUST NOT be overridden and SHALL rely on the `ScriptsInstallerTrait`.
@@ -70,6 +72,7 @@ protected function execute(InputInterface $input, OutputInterface $output): int
         $this->updateComposerJson();
         $this->createGitHubActionWorkflows();
         $this->copyEditorConfig();
+        $this->copyDependabotConfig();
         $this->addRepositoryWikiGitSubmodule();
 
         return self::SUCCESS;
@@ -91,7 +94,7 @@ private function updateComposerJson(): void
             return;
         }
 
-        $contents = $this->filesystem->readFile($file);
+        $contents = file_get_contents($file);
         $manipulator = new JsonManipulator($contents);
 
         $scripts = [
@@ -141,7 +144,7 @@ private function createGitHubActionWorkflows(): void
                 continue;
             }
 
-            $content = $this->filesystem->readFile($file->getRealPath());
+            $content = file_get_contents($file->getRealPath());
             $this->filesystem->dumpFile($targetPath, $content);
         }
     }
@@ -163,7 +166,27 @@ private function copyEditorConfig(): void
             return;
         }
 
-        $content = $this->filesystem->readFile($source);
+        $content = file_get_contents($source);
+        $this->filesystem->dumpFile($target, $content);
+    }
+
+    /**
+     * Installs the dependabot.yml configuration file in the .github directory if it does not exist.
+     *
+     * This method copies the dependabot.yml from the package resources to .github/dependabot.yml if it is not already present.
+     *
+     * @return void
+     */
+    private function copyDependabotConfig(): void
+    {
+        $source = parent::getDevToolsFile('dependabot.yml');
+        $target = parent::getConfigFile('.github/dependabot.yml', true);
+
+        if ($this->filesystem->exists($target)) {
+            return;
+        }
+
+        $content = file_get_contents($source);
         $this->filesystem->dumpFile($target, $content);
     }