DEN-5843: Standardize Dependabot configuration

.github/dependabot.yml

@@ -2,9 +2,39 @@ version: 2
 updates:
   - package-ecosystem: "uv"
     directory: "/"
+    open-pull-requests-limit: 5
     schedule:
-      interval: "daily"
+      interval: daily
+      time: "08:30"
+      timezone: Europe/Berlin
+    groups:
+      patch-and-minor:
+        update-types:
+          - patch
+          - minor
+    cooldown:
+      semver-major-days: 21
+      semver-minor-days: 7
+      semver-patch-days: 3
+      default-days: 7
+      exclude:
+        - '*getyourguide*'
   - package-ecosystem: "npm"
     directory: "/"
+    open-pull-requests-limit: 5
     schedule:
-      interval: "daily"
+      interval: daily
+      time: "08:30"
+      timezone: Europe/Berlin
+    groups:
+      patch-and-minor:
+        update-types:
+          - patch
+          - minor
+    cooldown:
+      semver-major-days: 21
+      semver-minor-days: 7
+      semver-patch-days: 3
+      default-days: 7
+      exclude:
+        - '*getyourguide*'

.github/workflows/dependabot-approve.yml

@@ -0,0 +1,20 @@
+name: Dependabot Approve
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+concurrency:
+  group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }}
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  auto-approve:
+    name: Approve PR
+    uses: getyourguide/actions/.github/workflows/dependabot-approve.yml@main
+    with:
+      pr-url: ${{ github.event.pull_request.html_url }}

.github/workflows/dependabot-automerge.yml

@@ -0,0 +1,22 @@
+name: Dependabot Auto Merge
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 9 * * 1-5"
+
+concurrency:
+  group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }}
+  cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }}
+
+permissions:
+  pull-requests: write
+  id-token: write
+
+jobs:
+  auto-merge:
+    name: Auto merge
+    uses: getyourguide/actions/.github/workflows/dependabot-merge.yml@main
+    secrets: inherit
+    with:
+      slack_ping_support: true