Create dependabot.yml file for dependabot to create pull requests

[Suman2795]

Overview

GH Dependabot has been enabled to issue alerts for vulnerabilities and security. Therefore we need a configuration file, dependabot.yml, to create pull requests so that we maintain up to date security in our repo.

Action Items

• Read configure dependabot.yml
• Read Create decision record for Using Dependabot to update GHA #3598 to understand HfLA's decision for implementing dependabot
  • See associated Decision Record for Dependabot
• Create a dependabot.yml file in the .github and configure the file as per the instructions given in 1st link

Resources/Instructions

• Enabling Dependabot Version Updates
• Configuration Options for Dependabot.yml file
• ER for Decision Record: Create decision record for Using Dependabot to update GHA #3598
• Decision Record for Dependabot
• See previous work done here: my other branch was having a lot of git issues so I made a new branch #4102

[blulady]

Hey @Suman2795,
You did an outstanding job on this issue!! It just needed the dev leads label to get a lead to approve it (which I am going to but just for the sake of demoing I put the label on it so you can see it) and to be put onto the Project Board (which I also did but reach out if you want me to show you, it's not hard). But I think I failed to put a link about issue creation so it's kind of my fault.
But this is great, it will be very easy for a dev to follow this issue.

[Suman2795]

Thanks Sarah for reviewing this. I might have missed the dev leads label and yes please tell me how to put the issue on project board.

[github-actions]

Hi @kurikurichan, thank you for taking up this issue! Hfla appreciates you :)

Do let fellow developers know about your:-
i. Availability: (When are you available to work on the issue/answer questions other programmers might have about your issue?)
ii. ETA: (When do you expect this issue to be completed?)

You're awesome!

P.S. - You may not take up another issue until this issue gets merged (or closed). Thanks again :)