set up dependabot (once we have integration tests) #23
Description
Depends on #19
See: https://gist.github.com/magnetikonline/6f215db058e327905bce66c37f92426c
It's important to have tests first, otherwise this can upgrade us to breaking changes without us knowing it.