Merge pull request #5 from apache/dependabot

Add dependabot configuration to project to keep deps updated