chore: add dependabot

[AsCress]

• Please check if the PR fulfills these requirements

• The commit message follows our guidelines
• Tests for the changes have been added (for bug fixes / features)
• Docs have been added / updated (for bug fixes / features)

• What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)

• Bug fix
• Feature implementation
• Doc updates

• Related Issue
  N/A

• What changes have you introduced?
  This PR adds depandabot to the repository to automatically update dependencies to the latest versions.

• Does this PR introduce a breaking change?
  No.

• Preview / Steps to verify your work:
  N/A

Summary by Sourcery

Add Dependabot configuration to automate weekly updates for GitHub Actions and Python dependencies.

New Features:

• Introduce Dependabot to automatically update dependencies for GitHub Actions and Python packages on a weekly schedule.

CI:

• Add a Dependabot configuration file to manage dependency updates for GitHub Actions and Python packages.

[sourcery-ai]

Reviewer's Guide by Sourcery

This pull request adds Dependabot configuration to the repository to automate dependency updates for GitHub Actions and Python packages on a weekly basis.

File-Level Changes

Change	Details	Files
Implement Dependabot for automated dependency updates	Set up Dependabot configuration with version 2 Enable beta ecosystems Configure GitHub Actions ecosystem for weekly updates Configure Python (pip) ecosystem for weekly updates	.github/dependabot.yml

---

Tips

• Trigger a new Sourcery review by commenting @sourcery-ai review on the pull request.
• Continue your discussion with Sourcery by replying directly to review comments.
• You can change your review settings at any time by accessing your dashboard:
  • Enable or disable the Sourcery-generated pull request summary or reviewer's guide;
  • Change the review language;
• You can always contact us if you have any questions or feedback.

[sourcery-ai]

Hey @AsCress - I've reviewed your changes - here's some feedback:

Overall Comments:

• Consider adding documentation on how to handle Dependabot pull requests, especially for new contributors. This can help maintain project stability while benefiting from automated dependency updates.
• The configuration enables beta ecosystems. While this can provide earlier access to updates, it may also introduce less stable versions. Consider if this aligns with the project's stability requirements.

Here's what I looked at during the review

• 🟢 General issues: all looks good
• 🟢 Security: all looks good
• 🟢 Testing: all looks good
• 🟢 Complexity: all looks good
• 🟢 Documentation: all looks good

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment to tell me if it was helpful.}