Run repo-config v0.14.0 migration script

Updates auto-dependabot workflow and mkdocs.yml for
mkdocstrings-python v2 compatibility.

Signed-off-by: Mathias L. Baumann <mathias.baumann@frequenz.com>

Author: Marenz

.github/workflows/auto-dependabot.yaml

@@ -1,36 +1,21 @@
 name: Auto-merge Dependabot PR
 
 on:
-  # XXX: !!! SECURITY WARNING !!!
-  # pull_request_target has write access to the repo, and can read secrets. We
-  # need to audit any external actions executed in this workflow and make sure no
-  # checked out code is run (not even installing dependencies, as installing
-  # dependencies usually can execute pre/post-install scripts). We should also
-  # only use hashes to pick the action to execute (instead of tags or branches).
-  # For more details read:
-  # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
-  pull_request_target:
+  pull_request:
 
 permissions:
-  contents: read
+  contents: write
   pull-requests: write
 
 jobs:
   auto-merge:
     if: github.actor == 'dependabot[bot]'
-    runs-on: ubuntu-slim
+    runs-on: ubuntu-latest
     steps:
-      - name: Generate GitHub App token
-        id: app-token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
-        with:
-          app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }}
-          private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }}
-
       - name: Auto-merge Dependabot PR
-        uses: frequenz-floss/dependabot-auto-approve@ada24053062e8199b27ab90890f6f21b48824864 # PR #3
+        uses: frequenz-floss/dependabot-auto-approve@3cad5f42e79296505473325ac6636be897c8b8a1  # v1.3.2
         with:
-          github-token: ${{ steps.app-token.outputs.token }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           dependency-type: 'all'
           auto-merge: 'true'
           merge-method: 'merge'

mkdocs.yml

@@ -99,8 +99,8 @@ plugins:
       default_handler: python
       handlers:
         python:
+          paths: ["src"]
           options:
-            paths: ["src"]
             docstring_section_style: spacy
             inherited_members: true
             merge_init_into_class: false
@@ -112,7 +112,7 @@ plugins:
             show_source: true
             show_symbol_type_toc: true
             signature_crossrefs: true
-          import:
+          inventories:
             # See https://mkdocstrings.github.io/python/usage/#import for details
             - https://docs.python.org/3/objects.inv
             - https://typing-extensions.readthedocs.io/en/stable/objects.inv