Merge pull request #1 from Bayusetiawan45/feature-dependabot

Create dependabot.yml

.github/dependabot.yml

@@ -0,0 +1,14 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: 'npm' # See documentation for possible values
+    directory: '/' # Location of package manifests
+    schedule:
+      interval: 'monthly'
+      time: '00:00'
+      timezone: 'Asia/Jakarta'
+    open-pull-requests-limit: 5

.github/workflows/npm-publish.yml

@@ -32,4 +32,4 @@ jobs:
       - run: npm publish --access public
         env:
           NPM_TOKEN: ${{secrets.NPM_TOKEN}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GH_TOKEN: ${{secrets.GH_TOKEN}}

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codebayu/sass",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "SASS boilerplate with gulp and sass",
   "main": "index.js",
   "scripts": {