Merge #692

692: Actually setup dependabot r=toasteater a=toasteater

Missed the part where `dependabot.yml` needed to be placed in `.github/`

bors r+

Co-authored-by: toasteater <48371905+toasteater@users.noreply.github.com>

Author: bors[bot]