Context

Dependabot is currently only updating the projects specified in the root pyproject.toml. To ensure all project dependencies are consistently updated, we need to extend this functionality to include dependencies located in the {{cookiecutter.project_slug}}/pyproject.toml. This will require creating a new workflow that runs in every PR and copies dependencies from the root pyproject.toml to {{cookiecutter.project_slug}}/pyproject.toml and runs poetry lock to lock the dependencies.

Acceptance Criteria

• Add all dependencies from the root {{cookiecutter.project_slug}}/pyproject.toml to pyproject.toml in a separated group.
• Implement a new workflow that:
  • Copies dependencies from the root pyproject.toml to {{cookiecutter.project_slug}}/pyproject.toml.
  • Executes poetry lock in the subdirectory to update the poetry.lock file.
  • It should run in every PR.
• Verify that dependabot updates trigger for dependencies in both the root and {{cookiecutter.project_slug}}/pyproject.toml.

Out of Scope

• Changes to dependency management tools other than Poetry.
• Modifications to any non-Python dependency files in the repository.