Configure automation for dependency updates

[ferrarimarco]

Fixes #4647

Proposed Changes

Automate some of the dependency updates that Dependabot produces by automatically merging and approving:

• Patch updates
• Any updates to the actions/checkout action
• Any updates to the docker/setup-buildx-action action
• Any updates to the docker/metadata-action action

We can add more over time as we see fit by adding more conditions. To build new conditions, we can look at the metadata that Dependabot adds to commits. Example:

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Readiness Checklist

Author/Contributor

• If documentation is needed for this change, has that been included in this pull request

Reviewing Maintainer

• Label as breaking if this is a large fundamental change
• Label as either automation, bug, documentation, enhancement, infrastructure, or performance

[zkoppert]

This is great! I'm interested to see how it works if the CI jobs fail. Hopefully it isn't able to bypass that.

[ferrarimarco]

It will not merge it because the PR with failing jobs will be removed from the merge queue.