Add Dependabot configuration

[u8array]

No description provided.

[gemini-code-assist]

Code Review

This pull request introduces a Dependabot configuration file to automate weekly updates for npm and GitHub Actions dependencies. The feedback suggests applying the same grouping logic used for npm to GitHub Actions updates to bundle minor and patch versions, which would help reduce pull request volume and maintain consistency across the configuration.

[gemini-code-assist]

To maintain consistency with the npm configuration and reduce pull request noise, consider grouping minor and patch updates for GitHub Actions as well. This ensures that non-breaking updates are bundled together, making them easier to manage and reducing the risk of hitting the open-pull-requests-limit.

  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly
    open-pull-requests-limit: 5
    commit-message:
      prefix: chore
      include: scope
    groups:
      # Bundle non-major updates so we don't get a flood of PRs
      minor-and-patch:
        update-types:
          - minor
          - patch