Create dependabot.yml to update GitHub actions packages

[Andrew-S-Rosen]

See https://learn.scientific-python.org/development/guides/gha-basic/#GH200 for context.

[codecov]

Codecov Report

Patch and project coverage have no change.

Comparison is base (7353e57) 88.14% compared to head (d429bd2) 88.14%.
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #852   +/-   ##
=======================================
  Coverage   88.14%   88.14%           
=======================================
  Files          44       44           
  Lines        3593     3593           
=======================================
  Hits         3167     3167           
  Misses        426      426           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[rkingsbury]

Looks good, but I'd like to restrict this to just GitHub actions because we have an alternate approach to updating dependencies for the package itself (See here)

So I think that means removing this portion of dependabot.yml

  - package-ecosystem: "pip" # See documentation for possible values
    directory: "/" # Location of package manifests
    schedule:
      interval: "weekly"

[Andrew-S-Rosen]

Ah okay! Good catch! I was wondering why there wasn't a depdendabot file originally. That explains it!

[Andrew-S-Rosen]

@rkingsbury: Should be good to go now.

[rkingsbury]

Thanks!