dependabot

Configuring Dependabot for a Python project

GitHub's Dependabot can automatically file PRs with bumps to dependencies when new versions of them are available.