add dependabot configuration and source metadata to Dockerfiles

.github/dependabot.yml

@@ -0,0 +1,23 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+  - package-ecosystem: "docker"
+    directory: "/base.alpine"
+    schedule:
+      interval: "monthly"
+  - package-ecosystem: "docker"
+    directory: "/base.scratch"
+    schedule:
+      interval: "monthly"
+  - package-ecosystem: "docker"
+    directory: "/build.go"
+    schedule:
+      interval: "monthly"

base.alpine/Dockerfile

@@ -1,6 +1,8 @@
 FROM alpine:3.19
 
-LABEL maintainer="Umputun <[email protected]>"
+LABEL org.opencontainers.image.authors="Umputun <[email protected]>"
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#docker
+LABEL org.opencontainers.image.source="https://github.com/umputun/baseimage"
 
 ENV \
     TERM=xterm-color           \

base.scratch/Dockerfile

@@ -1,7 +1,5 @@
 FROM ghcr.io/umputun/baseimage/app:latest as prep
 
-LABEL maintainer="Umputun <[email protected]>"
-
 RUN apk add -u tzdata ca-certificates build-base gcc
 
 RUN \
@@ -12,6 +10,11 @@ RUN \
     ls -la /tmp/nop
 
 FROM scratch
+
+LABEL org.opencontainers.image.authors="Umputun <[email protected]>"
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#docker
+LABEL org.opencontainers.image.source="https://github.com/umputun/baseimage"
+
 ENV TZ=America/Chicago
 COPY --from=prep /usr/share/zoneinfo /usr/share/zoneinfo
 COPY --from=prep /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

build.go/Dockerfile

@@ -1,5 +1,8 @@
 FROM golang:1.22-alpine
-LABEL maintainer="Umputun <[email protected]>"
+
+LABEL org.opencontainers.image.authors="Umputun <[email protected]>"
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#docker
+LABEL org.opencontainers.image.source="https://github.com/umputun/baseimage"
 
 ENV \
     TIME_ZONE=America/Chicago   \