Add security and versioning dependency alerts

[kulov]

Add security and versioning alerts for vulnerable dependencies using GitHub Dependabot

https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/

Expected Behavior

Alert on security and versioning issues with dependent libraries.
Dependabot alerts on updates for your dependencies, so you can spend less time updating dependencies and more time building. This also includes Dependabot features focused on automated security updates in which update packages that have known vulnerabilities.

Built with ❤ by Pipeline Foundation.