Add `dependabot.yml` to the list

[atombrella]

Thank you for this overview. GitHub's vulnerability scanner is not part of the overview. .github/dependabot.yml will enable PRs from dependabot with updates of vulnerable packages.

https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#configuration-options-for-updates

[joelparkerhenderson]

Done. Thank you for this!