Create dependabot.yml

[ranocha]

This allows to get updates for GitHub actions automatically - it is basically an equivalent of CompatHelper. I have used this for my own packages, the Trixi.jl framework, and the SciML organization. After merging this, you could also enable other Dependabot actions in 'Settings -> Code security and analysis -> Dependabot alerts' and '... -> Dependabot security updates'.

See SciML/MuladdMacro.jl#37

[codecov]

Codecov Report

Merging #338 (61a90b1) into master (453ba9f) will increase coverage by 0.48%.
The diff coverage is n/a.

❗ Current head 61a90b1 differs from pull request most recent head 89d796e. Consider uploading reports for the commit 89d796e to get more accurate results

@@            Coverage Diff             @@
##           master     #338      +/-   ##
==========================================
+ Coverage   90.66%   91.15%   +0.48%     
==========================================
  Files           2        3       +1     
  Lines         225      226       +1     
==========================================
+ Hits          204      206       +2     
+ Misses         21       20       -1     

see 3 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more