feat: add dependency analysis for automatic version updates (#3)

.github/dependabot.yml

@@ -0,0 +1,23 @@
+# This configuration file enables Dependabot version updates.
+# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/about-dependabot-version-updates
+# https://github.com/dependabot/feedback/issues/551
+
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    commit-message:
+      prefix: "fix"
+      prefix-development: "chore"
+      include: "scope"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    commit-message:
+      prefix: "fix"
+      prefix-development: "chore"
+      include: "scope"

README.md

@@ -28,6 +28,10 @@ Documentation is important, and [Sphinx](https://www.sphinx-doc.org/en/master/)
 
 Automatic package versioning and tagging, publishing to [PyPI](https://pypi.org/), and [Changelog](https://en.wikipedia.org/wiki/Changelog) generation are enabled using Github Actions (see [below](#versioning-publishing-and-changelog)).
 
+### Dependency Analysis
+
+[Dependabot](https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/about-dependabot-version-updates) is enabled to scan the dependencies and automatically create pull requests when an updated version is available.
+
 ### Standalone
 
 In addition to being an importable standard Python package, the package is also set up to be used as a runnable and standalone package using Python’s [-m](https://docs.python.org/3/using/cmdline.html#cmdoption-m) command-line option.

commitlint.rules.js

@@ -1,7 +1,7 @@
 // See also .github/workflows/pull-request.yml
 module.exports = {
   rules: {
-    "subject-case": [2, "always", "sentence-case"],
-    "subject-max-length": [2, "always", 72],
+    "subject-max-length": [2, "always", 100],
+    "body-max-line-length": [2, "always", 200],
   },
 };