Update module to go1.17 and enable dependabot updates

[justaugustus]

• go.mod: Update module to go1.17
• github: Add dependabot config

Signed-off-by: Stephen Augustus foo@auggie.dev

/assign @kikisdeliveryservice @jeremyrickard @mrbobbytables @palnabarun
cc: @kubernetes/enhancements-maintainers

[JamesLaverack]

/lgtm

[kikisdeliveryservice]

@justaugustus what is dependabot? I'm not familiar :)

[justaugustus]

@justaugustus what is dependabot? I'm not familiar :)

Dependabot is an app that's now embedded in GitHub to handle dependency updates. More here: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates

We use it for a bunch of Kubernetes org repos: https://cs.k8s.io/?q=package-ecosystem%3A&i=nope&files=&excludeFiles=&repos=

tl;dr -- our go.mod is pretty behind the times and we've likely got some outdated packages to fixup and maybe security vulns to address

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: justaugustus, kikisdeliveryservice

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [kikisdeliveryservice]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment