Enable dependabot updates to conda environment.yml file

.github/dependabot.yml

@@ -4,10 +4,18 @@
 # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference
 
 version: 2
+enable-beta-ecosystems: true
 updates:
+  - package-ecosystem: "conda"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    cooldown:
+      default-days: 7
+    open-pull-requests-limit: 2
+
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "quarterly"
-    # Allow up to 2 open pull requests at a time
     open-pull-requests-limit: 2

.github/workflows/README.md

@@ -3,6 +3,7 @@
 - binder.yaml - Adds a Binder badge to Pull Requests that are newly opened
 - build.yaml - Build and push docker container images to a docker registry
 - conda-lock-command.yml - Refresh conda-lock files by writing `/condalock` in a Pull Request comment
+- pr_comment.yml - Respond to dependabot Pull Request updating environment.yml with `/condalock` command
 - retag.yml - Republish docker images originally tagged with a short hash using a new CalVer string
 - slash-command-dispatch.yml - ChatOps that looks for slash commands in Pull Requests to trigger automated scripts
 - test.yaml - Test building docker container images in a Pull Request

.github/workflows/pr_comment.yml

@@ -0,0 +1,28 @@
+# Respond to dependabot Pull Request updating environment.yml with /condalock command!
+name: Pull Request comment
+
+on:
+  pull_request:
+    types: [opened, reopened]
+    paths: ["environment.yml"]
+
+permissions: {}
+
+jobs:
+  DeployPangeoBot:
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          persist-credentials: false
+
+      - name: Add Condalock Comment
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
+        with:
+          issue-number: ${{github.event.number}}
+          body: |
+            /condalock
+            Automatically locking new conda environment, building, and testing images...