Add dependabot config

[kaitj]

Proposed changes

Noted there were still some workflow using old versions (e.g. actions/checkout@v3). Setup dependabot config for automatically updating github actions versions and added a skip_changelog label to it in order to leave update of github actions out of the release notes. This should make managing the actions versions a little bit easier given the number of workflows we have.

We can consider adding adding the ability to update poetry dependencies to this as well, but I'm not entirely sure how that works. I think it may constrain it to the versions specified by the pyproject.toml, but can look into this more in a future PR if we want to go down this road.

Checklist

Put an x in the boxes that apply. You can also fill these out after creating the PR. If you are unsure about any of the choices, don't hesitate to ask!

• Changes have been tested to ensure that fix is effective or that a feature works.
• Changes pass the unit tests
• I have included necessary documentation or comments (as necessary)
• Any dependent changes have been merged and published

Notes

All PRs will undergo the unit testing before being reviewed. You may be requested to explain or make additional changes before the PR is accepted.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (35cc8e0) 92.03% compared to head (65c774c) 92.03%.
Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #383   +/-   ##
=======================================
  Coverage   92.03%   92.03%           
=======================================
  Files          40       40           
  Lines        1770     1770           
=======================================
  Hits         1629     1629           
  Misses        141      141           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[pvandyken]

I do periodically check the poetry deps, there's a simple command to do so, so I don't see that as a big deal.

This is nice though, I had started to try this before and got intimidated