dependabot automerge PRs

[mkrump]

Description

Auto merge minor version upgrades initiated by dependabot. Dependabot can automerge updates, but our branch protection will block it, so also add an auto approve GH action to approve dependabot PRs.

[chrisgilmerproj]

🚀 - I really like this update. I guess if we want to ignore specific dependency updates across major versions we either need to pin those deps or add an ignore rule. Which is good to know and I can communicate that to the teams.

[mkrump]

I guess if we want to ignore specific dependency updates across major versions we either need to pin those deps or add an ignore rule.

Also, if you just close the PR it's supposed to wait until the next update, which is kinda nice b/c you have to continually say you don't want an update.