CF-15869: Add Dependabot merge and approve workflows

Author: fallemand

.github/workflows/dependabot-approve.yml

@@ -0,0 +1,17 @@
+name: Dependabot Approve
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  auto-approve:
+    name: Approve PR
+    uses: getyourguide/actions/.github/workflows/dependabot-approve.yml@main
+    with:
+      targets: patch:all,minor:all
+      pr-url: ${{ github.event.pull_request.html_url }}

.github/workflows/dependabot-merge.yml

@@ -0,0 +1,25 @@
+name: Dependabot Merge
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 9 * * Mon"
+
+permissions:
+  contents: read
+  pull-requests: write
+  id-token: write
+  checks: write
+
+concurrency:
+  group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }}
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
+jobs:
+  auto-merge:
+    name: Auto merge
+    uses: getyourguide/actions/.github/workflows/dependabot-merge.yml@main
+    with:
+      slack_channel: "#sec-dependabot-automerge"
+      slack_ping_support: false
+    secrets: inherit