feat: setup dependabot config

[christian-heusel]

Create a dependabot config similar to the one proposed in kubeflow/notebooks to reduce the overall notification / pr spam.

Link: kubeflow/notebooks#998

[google-oss-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign thesuperzapper for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[christian-heusel]

/ok-to-test

[andyatmiami]

/lgtm

given we haven't been actively reviewing and staying up to date on the dependabot PRs - quieting down the noise in the near term seems like a good idea.

i appreciate how a recommended approach to go is included in the PR but commented out for the time being and this is also aligned with https://github.com/kubeflow/notebooks/pull/1014/changes

@christian-heusel also set up a nice "playground" repo to see the types of issues that would get raised from a comparable config here:

• https://github.com/christian-heusel/notebooks-playground/pulls?q=is%3Apr+is%3Aopen+label%3Agithub_actions