adding GH dependabot

[Borda]

This is a follow-up work of #431 to safely bump versions via PR, also triggering all CI to ensure development stability...

[Borda]

@hugovk, how about addig this bot? :)

[hugovk]

Good idea, but you'll have to ask a project member :)

I personally use Renovate because it can group updates into a single PR (for example), but Dependabot is also good for keeping things fresh.

[Borda]

I personally use Renovate because it can group updates into a single PR (for example), but Dependabot is also good for keeping things fresh.

never heard about it but I see an advantage in doing it one by one as if it is smooth, you just merge it and won't block that one of many has some collisions and need to be fixed somehow...

[Borda]

@dbieber mind have look, pls :rabbit:

[Borda]

@dbieber can I help with anything else here? :rabbit:

[dbieber]

Thanks for checking back in, but unfortunately no, I haven't found time for this yet.

[Borda]

Gentle ping @dbieber :chipmunk:

[Borda]

hello @dbieber, any update so far? :flamingo:

[Borda]

@dbieber, any chance you could check it? :rabbit:

[Borda]

@dbieberhow are you doing, still with this project? :chipmunk:

[Borda]

hello @dbieber, happy New year! :fireworks:

[dbieber]

happy new year @Borda :)

[dbieber]

Thank you. I'll merge this now.