chore(frontend): adding dependabot

[axel7083]

Some packages in the frontend/packages.json are a bit outdated, keeping them up to date manually can be often tedious.

Github has the dependabot allowing to automate this process.

See https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

[bates64]

I'm against this until we have tests. We've had issues in the past updating minor versions of packages that have introduced subtle bugs. Just updating a package for the sake of keeping it up-to-date has no utility.

[ethteck]

Yeah I appreciate the thought, but this is the kind of thing that I think would be better as not PRs but some sort of notification list of outdated dependencies that can be manually checked

[bates64]

but some sort of notification list of outdated dependencies that can be manually checked

This is called yarn outdated