Add a config for dependabot alerts

Summary:
Added explicit configuration for dependabot. We already use it to be
alerted when CVEs are reported but don't use PRs created by dependabot to
mitigate at the moment.

Test Plan: N/A Just some tooling configs

Reviewers: michelle, zasgar

Reviewed By: zasgar

Signed-off-by: Vihang Mehta <vihang@pixielabs.ai>

Differential Revision: https://phab.corp.pixielabs.ai/D11378

GitOrigin-RevId: c86d8c2

.github/dependabot.yml

@@ -0,0 +1,15 @@
+---
+version: 2
+updates:
+- package-ecosystem: "npm"
+  directory: "/src/ui"
+  schedule:
+    interval: "daily"
+  # Alert but don't open PRs
+  open-pull-requests-limit: 0
+- package-ecosystem: "gomod"
+  directory: "/"
+  schedule:
+    interval: "daily"
+  # Alert but don't open PRs
+  open-pull-requests-limit: 0