Configure .github/dependabot.yml

[omonimus1]

Configure github/dependabot.yml for security updated.
The goal of this task is to configure dependabot file, to scan dependencies across the used package managers and Continuos integration environments ("github-actions") to identify outdated dependencies or services used in this repository.

Scan the repository packages managers and services used in this repository (For example: pip for python - "github-actions" for github action) and configure the dependabot.yml file

Example of github/dependabot.yml

version: 2
updates:
  # Enable version updates for npm
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 10

  # Enable version updates for GitHub Actions
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 10

Doc: https://docs.github.com/en/code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories