feat: impl gh workflows and dependabot

Author: andostronaut

.github/dependabot.yml

@@ -0,0 +1,20 @@
+version: 2
+
+updates:
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+  - package-ecosystem: npm
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    open-pull-requests-limit: 10
+    versioning-strategy: increase-if-necessary
+    reviewers:
+      - 'andostronaut'
+    assignees:
+      - 'andostronaut'
+    labels:
+      - 'dependencies'
+      - 'pnpm'

.github/workflows/build.yml

@@ -0,0 +1,21 @@
+name: build
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node-version:
+          - 20
+    steps:
+      - uses: actions/checkout@v3
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'pnpm'
+      - run: pnpm install
+      - run: pnpm run lint

.github/workflows/pr.yml

@@ -0,0 +1,17 @@
+name: pull-request
+
+on:
+  push:
+    branches-ignore:
+      - main
+
+jobs:
+  create-pull-request:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: jascodes/pr-branch-action@1.0.3
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+          PULL_REQUEST_BRANCH: main
+          PULL_REQUEST_TITLE: ${{ github.event.head_commit.message }}