build: add dependabot config #979

	name: Build

	on: [push, pull_request]

	jobs:
	test:

	runs-on: ubuntu-latest
	strategy:
	matrix:
	python_version: ['3.11', '3.12', '3.13']

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python_version }}
	- name: Setup Graphviz
	uses: ts-graphviz/setup-graphviz@v2
	- name: Install uv
	uses: yezz123/setup-uv@v4
	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install hatch
	hatch env create
	- name: Lint and typecheck
	run: \|
	hatch run lint-check
	- name: Test
	run: \|
	hatch run test-cov-xml
	- uses: codecov/codecov-action@v4
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	fail_ci_if_error: true
	verbose: true

	release:
	runs-on: ubuntu-latest
	needs: test
	if: startsWith(github.ref, 'refs/tags/')
	permissions:
	# IMPORTANT: this permission is mandatory for trusted publishing
	id-token: write
	contents: write
	steps:
	- uses: actions/checkout@v4
	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.12'
	- name: Install dependencies
	shell: bash
	run: \|
	python -m pip install --upgrade pip
	pip install hatch
	- name: Build and publish on PyPI
	env:
	HATCH_INDEX_USER: ${{ secrets.HATCH_INDEX_USER }}
	HATCH_INDEX_AUTH: ${{ secrets.HATCH_INDEX_AUTH }}
	run: \|
	hatch build
	hatch publish
	- name: Create release
	uses: ncipollo/release-action@v1
	with:
	draft: true
	body: ${{ github.event.head_commit.message }}
	artifacts: dist/.whl,dist/.tar.gz
	token: ${{ secrets.GITHUB_TOKEN }}

Provide feedback