Setup dependabot

[greg0ire]

No description provided.

[greg0ire]

@derrabus, may I asked what your intent was with #453 ? I believe it's causing the build failure

[derrabus]

I wanted to test against upcoming releases (PHP 8.3, ORM 3, DBAL 4).

[greg0ire]

I believe this is caused by sebastianbergmann/phpunit@63183f2

What should we do?

• Use the workaround?
• Revert Test on PHP 8.3 and with dev deps #453?
• Tweak config so that the "dev" build only allows dev versions of PHP, and doctrine/*?

[derrabus]

Use the workaround?

Let's not use mocks here. My proposal: #476

Tweak config so that the "dev" build only allows dev versions of PHP, and doctrine/*?

In general: I think it's fine if the dev job fails from time to time because of changes upstream.

But we could of course also pin PHPUnit like we do on other repos. Maybe have dependabot bump our tools then?

[greg0ire]

But we could of course also pin PHPUnit like we do on other repos. Maybe have dependabot bump our tools then?

Sounds like a good idea 👍