Upgrade to GitHub-native Dependabot

[dependabot-preview]

Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then.

Dependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request migrates your configuration from Dependabot.com to a config file, using the new syntax. When merged, we'll swap out dependabot-preview (me) for a new dependabot app, and you'll be all set!

With this change, you'll now use the Dependabot page in GitHub, rather than the Dependabot dashboard, to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.

If you've got any questions or feedback for us, please let us know by creating an issue in the dependabot/dependabot-core repository.

Learn more about migrating to GitHub-native Dependabot

Please note that regular @dependabot commands do not work on this pull request.

[dependabot-preview]

As a reminder, Dependabot Preview will be shut down on August 3rd, 2021. You can merge this pull request to migrate to GitHub-native Dependabot. You can read the docs to learn more about what's changing, as well as find out how to get support if you need help migrating.

[rvagg]

@marten-seemann what's our approach with dependabot and Go repos now? can we get this converted?

[marten-seemann]

Dependabot is currently not part of the Unified CI Setup. We haven't actually had any discussion about it yet, maybe we should? Could you open an issue in https://github.com/protocol/.github?

For now, you can go ahead and merge this PR if you want Dependabot to continue working here.

[rvagg]

I'll leave it to someone else with higher privs to check and modify repo settings to merge this I think.