paulmillr Update dependabot.yml