adds dependabot compatible lockfile and config

Author: rudolfix

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  # # we do not want automatic PRs with dependency updates and dependency resolution for uv
+  # # does not fully work
+  # - package-ecosystem: uv
+  #   directory: "/"
+  #   schedule:
+  #     interval: daily
+
+  # use requirements.txt in tools/dependabot_lock synced with lockfile
+  - package-ecosystem: pip
+    directory: "tools/dependabot_lock"
+    schedule:
+      interval: daily
+    # don't do PRs
+    open-pull-requests-limit: 0

Makefile

@@ -11,6 +11,8 @@ help:
 
 dev:
 	uv sync --reinstall-package dlt --upgrade-package dlt
+	# export lockfile in widely recognized format
+	uv export --format requirements-txt --all-extras --all-groups --no-editable --locked -q --output-file tools/dependabot_lock/requirements.txt
 
 lint-dlt-init:
 	uv run ./check-requirements.py