Auto update ZTK versions.

.github/dependabot.yml

@@ -0,0 +1,20 @@
+---
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    pull-request-branch-name:
+      separator: "-"
+    labels:
+      - github_actions
+  - package-ecosystem: pip
+    directory: dependabot/
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    pull-request-branch-name:
+      separator: "-"
+    labels:
+      - dependencies

.github/workflows/sync.yml

@@ -0,0 +1,36 @@
+name: Sync Requirements
+
+on:
+  pull_request:
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  sync:
+    strategy:
+      matrix:
+        python-version: [3.11]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          ref: ${{ github.event.pull_request.head.ref }}
+          token: ${{ secrets.COMMIT_ACTIONS_TOKEN }}
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install vereqsyn
+      - name: Syncing ztk-versions.cfg with requirements.txt
+        run: |
+          vereqsyn ztk-versions.cfg dependabot/requirements.txt
+      - name: Commit changes
+        uses: EndBug/add-and-commit@v9
+        with:
+          committer_name: GitHub Actions
+          committer_email: actions@github.com
+          message: Version synchronization
+          add: '["ztk-versions.cfg", "dependabot/requirements.txt"]'

docs/process/updating-ztk.rst

@@ -4,6 +4,9 @@ Updating the ZTK itself
 Updating versions of dependencies
 ---------------------------------
 
+Manual way
+++++++++++
+
 To get new version pins into ZTK run the following steps:
 
 * ``tox -e checkversions | grep "="``
@@ -16,6 +19,15 @@ To get new version pins into ZTK run the following steps:
   versions are updated.
 * If the test runs are successful: create a pull request on GitHub.
 
+Automated way
++++++++++++++
+
+* There is a dependabot configuration automatically updating
+  ``dependabot/requirements.txt``.
+
+* And there is a GitHub actions job syncing between
+  ``dependabot/requirements.txt`` and ``ztk-versions.cfg``.
+
 Creating a release
 ------------------