- [ ] add `dependabot.yml` - [ ] enable dependency bot
dependabot.yml