chore: update-package-lock workflow

.github/dependabot.yml

@@ -5,13 +5,17 @@ updates:
     directory: "/"
     schedule:
       interval: monthly
-    versioning-strategy: increase
+    versioning-strategy: increase-if-necessary
     commit-message:
       prefix: fix
       prefix-development: build
       include: scope
     ignore:
       - dependency-name: "chai"
         versions: [">=5.0"] # ESM only
+      # update-package-lock workflow already handles most minor/patch updates
+      # continue checking minor updates to cover dependendencies with version pattern 0.*.*
+      - dependency-name: "*"
+        update-types: ["version-update:semver-patch"]
     reviewers:
       - "Brightspace/lurvig"

.github/workflows/update-package-lock.yml

@@ -0,0 +1,12 @@
+name: Update package-lock.json
+on:
+  schedule:
+    - cron: '0 15 * * 1' # Mon 11:00AM EDT. 10:00AM EST.
+    - cron: '0 6 1 * *' # 1st of each month 2:00 AM EDT/1:00 AM EST
+  workflow_dispatch: # manual trigger
+jobs:
+  Update:
+    uses: Brightspace/space-github-actions/.github/workflows/update-package-lock.yml@main
+    secrets: inherit
+    with:
+      DEFAULT_BRANCH: master

CODEOWNERS

@@ -1 +1,2 @@
 * @Brightspace/lurvig
+package-lock.json