Use .yaml instead of .yml

[InSyncWithFoo]

Is there any actual reason why dependabot.yml et al. stay their way? The official YAML FAQ says .yaml should be used whenever possible.

[Danil42Russia]

The official documentation suggests using dependabot.yml. Although the bot doesn't care what extension the file has (yml, yaml), it is common in the community to use dependabot.yml :)

[hsz]

As Danil said, we stick to docs.