Merge pull request #76 from nochiel/dependabot

Add Dependabot configuration.

Author: shannona

.github/dependabot.yaml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "pip"  # See documentation for possible values
+    directory: "/"            # Location of package manifests
+    schedule:
+      interval: "weekly"

requirements.txt

@@ -11,7 +11,7 @@ attrs==21.4.0
 bdkpython==0.0.5
 beancount==2.3.5
 beautifulsoup4==4.10.0
-bottle==0.12.19
+bottle==0.12.20
 buidl==0.2.36
 cachetools==5.0.0
 ccxt==1.74.49
@@ -37,7 +37,7 @@ isort==5.10.1
 itsdangerous==2.1.0
 Jinja2==3.0.3
 lazy-object-proxy==1.7.1
-lxml==4.8.0
+lxml==4.9.1
 MarkupSafe==2.1.0
 mccabe==0.6.1
 multidict==6.0.2
@@ -51,7 +51,7 @@ protobuf==3.20.0
 py==1.11.0
 pyasn1==0.4.8
 pyasn1-modules==0.2.8
-pycares==4.1.2
+pycares==4.2.0
 pycparser==2.21
 pydantic==1.9.0
 pyparsing==3.0.7