feat: add support for dependabot 🥳

[vinayakkulkarni]

• Enables support for dependabot so that all the package dependencies are kept up-to-date with npm so as to mitigate any vulnerabilities in older versions of packages.

[ronag]

We only have dev deps so there is a risk this just leads to annoying notifications with little value.

[mcollina]

I partially concur. I think it might be useful with a less annoying config like: https://github.com/fastify/fastify/blob/main/.github/dependabot.yml

I would also recommend we add https://github.com/fastify/fastify/blob/main/.github/dependabot.yml, configured like https://github.com/fastify/fastify/blob/da8fafdc2132cde357230fa5b43344058fdd3586/.github/workflows/ci.yml#L82. In this way the amount of manual work is greatly reduced.

[codecov-commenter]

Codecov Report

Merging #1370 (73b7f33) into main (615f617) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #1370   +/-   ##
=======================================
  Coverage   94.25%   94.25%           
=======================================
  Files          45       45           
  Lines        4211     4211           
=======================================
  Hits         3969     3969           
  Misses        242      242           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 615f617...73b7f33. Read the comment docs.

[mcollina]

lgtm