chore: add dependabot config file

.github/dependabot.yml

@@ -0,0 +1,25 @@
+version: 1
+update_configs:
+  # Keep package.json (& lockfiles) up to date as soon as
+  # new versions are published to the npm registry
+  - package_manager: javascript
+    target_branch: master
+    directory: /
+    default_labels:
+      - chore
+    update_schedule: daily
+    version_requirement_updates: auto
+    automerged_updates:
+      - match:
+          dependency_type: development
+          update_type: in_range
+      - match:
+          dependency_type: production
+          update_type: "security:patch"
+  # Keep Dockerfile up to date, batching pull requests weekly
+  # - package_manager: docker
+  #   target_branch: master
+  #   directory: /
+  #   default_labels:
+  #     - chore
+  #   update_schedule: weekly