deps: configure daily Dependabot with automerge

Author: nikolay-e

.github/dependabot.yml

@@ -3,7 +3,7 @@ updates:
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "daily"
     labels:
       - "dependencies"
     assignees:
@@ -19,7 +19,7 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "daily"
     labels:
       - "dependencies"
     assignees:

.github/workflows/automerge.yml

@@ -0,0 +1,20 @@
+name: Dependabot auto-merge
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  automerge:
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Enable auto-merge for Dependabot PRs
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/cd.yml

@@ -4,7 +4,7 @@ name: treemapper CD
 permissions:
   contents: write
 
-on:
+'on':
   workflow_dispatch:
     inputs:
       version:
@@ -269,8 +269,9 @@ jobs:
           # Verify the built packages have correct version in filename
           echo "Built packages:"
           ls -la dist/
-          echo "Looking for version ${{ needs.prepare-version.outputs.version }} in package names..."
-          ls dist/*${{ needs.prepare-version.outputs.version }}* || echo "WARNING: No packages found with expected version!"
+          VERSION="${{ needs.prepare-version.outputs.version }}"
+          echo "Looking for version ${VERSION} in package names..."
+          ls dist/*${VERSION}* || echo "WARNING: No packages found!"
 
       - name: Publish package distributions to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
@@ -302,7 +303,9 @@ jobs:
           echo "Current commit: $(git rev-parse HEAD)"
 
           # Set up remote to point to the actual GitHub repository
-          git remote add origin https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}.git
+          REPO_URL="https://x-access-token:${{ secrets.GITHUB_TOKEN }}"
+          REPO_URL="${REPO_URL}@github.com/${{ github.repository }}.git"
+          git remote add origin "${REPO_URL}"
 
           # Verify remote is set up correctly
           git remote -v

.github/workflows/ci.yml

@@ -5,7 +5,7 @@ permissions:
   contents: read
   security-events: write  # For CodeQL
 
-on:
+'on':
   pull_request:
     branches: ['**']
   push: