Consider Dependabot for managing updates

[bernalde]

Hello team, how about if we consider using a Dependabot to keep the dependencies updated and safe? https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide