fix: do not add dependabot files when config is falsy

lib/content/index.js

@@ -37,6 +37,7 @@ const sharedRootAdd = (name) => ({
   // dependabot
   '.github/dependabot.yml': {
     file: 'dependabot.yml',
+    filter: (p) => p.config.dependabot,
     clean: (p) => p.config.isRoot,
     // dependabot takes a single top level config file. this parser
     // will run for all configured packages and each one will have
@@ -48,6 +49,7 @@ const sharedRootAdd = (name) => ({
   },
   '.github/workflows/post-dependabot.yml': {
     file: 'post-dependabot.yml',
+    filter: (p) => p.config.dependabot,
   },
   '.github/settings.yml': {
     file: 'settings.yml',

test/apply/dependabot.js

@@ -0,0 +1,30 @@
+const t = require('tap')
+const setup = require('../setup.js')
+
+t.test('default dependabot', async (t) => {
+  const s = await setup(t)
+  await s.apply()
+
+  const dependabot = await s.readFile('.github/dependabot.yml')
+  const postDependabot = await s.stat('.github/workflows/post-dependabot.yml')
+
+  t.match(dependabot, 'increase-if-necessary')
+  t.ok(postDependabot)
+})
+
+t.test('no dependabot', async (t) => {
+  const s = await setup(t, {
+    package: {
+      templateOSS: {
+        dependabot: false,
+      },
+    },
+  })
+  await s.apply()
+
+  const dependabot = await s.stat('.github/dependabot.yml').catch(() => false)
+  const postDependabot = await s.stat('.github/workflows/post-dependabot.yml').catch(() => false)
+
+  t.equal(dependabot, false)
+  t.equal(postDependabot, false)
+})