chore: configure dependency update tool

[lucasgonze]

chore: configure dependency update tool

See https://github.com/magma/security/issues/144

Summary

Magma configures Dependabot using the Github UI instead of a dependabot.yml file. This prevents automated verification of secure configuration.

The change should have no developer-visible impacts.

Related issue: https://github.com/magma/security/issues/144

Test Plan

I pushed the identical change to my personal fork and left it for a week to be sure no unwanted PRs were being submitted. It worked.

Additional Information

• This change is backwards-breaking

Security Considerations

A net improvement to security by enabling automated checking.

[github-actions]

Thanks for opening a PR! 💯

A couple initial guidelines

• All commits must be signed off. This is enforced by PR DCO check.
• All PR titles must follow the semantic commits format. This is enforced by PR Check Title Or Commit Message.

Howto

• Reviews. The "Reviewers" listed for this PR are the Magma maintainers who will shepherd it.
• Checks. All required CI checks must pass before merge.
• Merge. Once approved and passing CI checks, use the ready2merge label to indicate the maintainers can merge your PR.

More info

Please take a moment to read through the Magma project's

• Contributing Conventions for norms around contributed code

If this is your first Magma PR, also consider reading

• Developer Onboarding for onboarding as a new Magma developer
• Development Workflow for guidance on your first PR
• CI Checks for points of contact for failing or flaky CI checks
• Code Review Process for information on requesting reviews and contacting maintainers

[github-actions]

❌ The Semantic PR check ended with status failure. See instructions on formatting your commit and pull request titles.

[github-actions]

DP Lint & Test

0 tests   0 ✔️  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit 9ebacd8.

♻️ This comment has been updated with latest results.

[github-actions]

Oops! Looks like you failed the PR Check DCO. Be sure to sign all your commits.

Howto

• Magma guidelines on signing commits
• About the signoff feature
• Howto: sign-off most-recent commit
• Howto: sign-off multiple past commits
• Guide to the different CI checks and resolution guidelines

♻️ Updated: ✅ The check is passing the PR Check DCO after the last commit.