Enable dependabot updates

[szegedi]

What does this PR do?:
Enable Dependabot for updates.

Motivation:
We'd prefer to use Dependabot instead of campaignbot.

Additional Notes:
This is based on very little exploration of the docs. It might need to be refined over time.

Jira: PROF-13759

[github-actions]

Overall package size

Self size: 1.77 MB
Deduped: 2.14 MB
No deduping: 2.14 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | source-map | 0.7.6 | 185.63 kB | 185.63 kB | | pprof-format | 2.2.1 | 163.06 kB | 163.06 kB | | p-limit | 3.1.0 | 7.75 kB | 13.78 kB | | node-gyp-build | 3.9.0 | 8.81 kB | 8.81 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-02-17 11:44:58

Comparing candidate commit 986ee7e in PR branch enable-dependabot with baseline commit e7bcdef in branch main.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 91 metrics, 29 unstable metrics.

[IlyasShabi]

This could create a lot of noise, why not weekly?
Also, I think that we should ignore the internal dependency pprof-format

[szegedi]

that all makes sense, will update

[szegedi]

Alright, updated it to weekly, added pprof-format to exclusions, and customized the labels so we don't have to manually add semver-patch.

[IlyasShabi]

LGTM