From 12f8eec6a51c9c9d4e76702a914e03cdead5e943 Mon Sep 17 00:00:00 2001
From: Behnaz Hassanshahi <b.hassanshahi@gmail.com>
Date: Wed, 13 Oct 2021 18:19:43 +1000
Subject: [PATCH] feat: add dependency analysis for automatic version updates
 (#3)

---
 .github/dependabot.yml | 23 +++++++++++++++++++++++
 README.md              |  4 ++++
 commitlint.rules.js    |  4 ++--
 3 files changed, 29 insertions(+), 2 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..2ee0e465
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,23 @@
+# This configuration file enables Dependabot version updates.
+# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/about-dependabot-version-updates
+# https://github.com/dependabot/feedback/issues/551
+
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    commit-message:
+      prefix: "fix"
+      prefix-development: "chore"
+      include: "scope"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    commit-message:
+      prefix: "fix"
+      prefix-development: "chore"
+      include: "scope"
diff --git a/README.md b/README.md
index 556634c8..94700e97 100644
--- a/README.md
+++ b/README.md
@@ -28,6 +28,10 @@ Documentation is important, and [Sphinx](https://www.sphinx-doc.org/en/master/)
 
 Automatic package versioning and tagging, publishing to [PyPI](https://pypi.org/), and [Changelog](https://en.wikipedia.org/wiki/Changelog) generation are enabled using Github Actions (see [below](#versioning-publishing-and-changelog)).
 
+### Dependency Analysis
+
+[Dependabot](https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/about-dependabot-version-updates) is enabled to scan the dependencies and automatically create pull requests when an updated version is available.
+
 ### Standalone
 
 In addition to being an importable standard Python package, the package is also set up to be used as a runnable and standalone package using Python’s [-m](https://docs.python.org/3/using/cmdline.html#cmdoption-m) command-line option.
diff --git a/commitlint.rules.js b/commitlint.rules.js
index 424bb4a6..689ac491 100644
--- a/commitlint.rules.js
+++ b/commitlint.rules.js
@@ -1,7 +1,7 @@
 // See also .github/workflows/pull-request.yml
 module.exports = {
   rules: {
-    "subject-case": [2, "always", "sentence-case"],
-    "subject-max-length": [2, "always", 72],
+    "subject-max-length": [2, "always", 100],
+    "body-max-line-length": [2, "always", 200],
   },
 };