ericLemanissier

Create dependabot.yml

1

This allows dependabot to create dependencies version bumps for github-actions, as well as npm packages, as can be seen on https://github.com/ericLemanissier/cla-assistant/pulls

PR message: sort users

1

This avoids useless message updates messing with stale bots, as for example in https://github.com/conan-io/conan-center-index/pull/16711#issuecomment-1484130728