Merge pull request #2 from nhojpatrick/dependabot

enable dependabot