Consider Dependabot for managing updates

[bernalde]

Hello team,
how about if we consider using a Dependabot to keep the dependencies updated and safe?
https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide