Merge pull request #3 from nhojpatrick/dependabot

enable dependabot