Auto merge of #1971 - Turbo87:dependabot, r=carols10cents

Add dependabot configuration file

see https://dependabot.com/docs/config-file/

as discussed via Discord, I generally prefer the configuration files as it is more explicit and transparent than configuration via the dashboard. the other advantage is that not only organization admins can configure it now via PRs. :)

/cc @carols10cents

Author: bors

.dependabot/config.yml

@@ -0,0 +1,8 @@
+version: 1
+update_configs:
+  - package_manager: "javascript"
+    directory: "/"
+    update_schedule: "weekly"
+    version_requirement_updates: "increase_versions"
+    commit_message:
+      prefix: ""