Merge #692

692: Actually setup dependabot r=toasteater a=toasteater

Missed the part where `dependabot.yml` needed to be placed in `.github/`

bors r+

Co-authored-by: toasteater <[email protected]>

Author: bors[bot]