chore(form-v2): add dependabot, run npm audit, move some packages to …

…devDependencies (#2313)

* chore: update dependabot to also run on form-v2/develop branch

* chore: run npm audit and npm update

* chore: move most tooling packages to devDependencies

note that react-scripts is also moved to devDependencies. CRA is a build tool and thus do not truly belong in dependencies.
See their own argument: facebook/create-react-app#11102

this allows npm audit --production to raise any real vulnerabilities

* chore: add cache flag to eslint command in .lintstagedrc

.github/dependabot.yml

@@ -15,3 +15,17 @@ updates:
       prefix: 'fix'
       prefix-development: 'chore'
       include: 'scope'
+  - package-ecosystem: 'npm' # See documentation for possible values
+      directory: '/frontend' # Location of package manifests
+      schedule:
+        interval: 'daily'
+        time: '01:00'
+        timezone: 'Asia/Singapore'
+      commit-message:
+        prefix: 'fix'
+        prefix-development: 'chore'
+        include: 'scope'
+      labels:
+        - "react"
+        - "dependencies"
+      target-branch: "form-v2/develop"

frontend/.lintstagedrc.yml

@@ -1,3 +1,3 @@
 '*.{js,ts,tsx}':
   - prettier --write
-  - eslint --fix
+  - eslint --cache --fix