build: add maven build (#10)

* add dependabot for update libs

.github/dependabot.yml

@@ -0,0 +1,24 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "maven" # See documentation for possible values
+    target-branch: "master"
+    open-pull-requests-limit: 2 # Allow up globally to 2 simultaneously open pull requests for dependencies
+    directory: "/" # Location of package manifests
+    commit-message:
+      prefix: "Dependabot"
+    pull-request-branch-name:
+      separator: "/"
+    labels:
+      - "dependencies"
+    schedule:
+      interval: "weekly"
+    #  ignore:
+      # Ignore all major updates for now until additional version ignores are working
+      # Security updates are not affected by this ignore filter and still will be updated
+    #  - dependency-name: "*"
+    #    update-types: [ "version-update:semver-major" ]

.github/workflows/gradle.yml

@@ -0,0 +1,38 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+# This workflow will build a Java project with Gradle and cache/restore any dependencies to improve the workflow execution time
+# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-gradle
+
+name: Java CI with Gradle
+
+on:
+  push:
+    branches:
+    - 'feature/*'
+    - 'master'
+  pull_request:
+    branches: [ "master" ]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v3
+    - name: Set up JDK 17
+      uses: actions/setup-java@v3
+      with:
+        java-version: '17'
+        distribution: 'temurin'
+    - name: Build with Maven
+      run: mvn -B package --file pom.xml
+
+    # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
+    - name: Update dependency graph
+      uses: advanced-security/maven-dependency-submission-action@571e99aab1055c2e71a1e2309b9691de18d6b7d6