[Improvement] Add dependabot to auto update maven dependencies.

[yangrong688]

Code of Conduct

• I agree to follow this project's Code of Conduct

Search before asking

• I have searched in the issues and found no similar issues.

What would you like to be improved?

Projects like Apache Hadoop / Zeppelin enabled dependabot to auto detect maven dependency update.
We can also enable it to help us better update maven dependencies' version.

ref:
apache/hadoop#3890
apache/zeppelin#4342

How should we improve?

1. add configuration file dependabot.yml
2. enable dependabot ( should operate by committer)
   this step can follow the directions of below article

https://cloud.tencent.com/developer/article/1910792

Are you willing to submit PR?

• Yes I am willing to submit a PR!

[yangrong688]

@pan3793 @yaooqinn WDYT?

[pan3793]

It may not suitable for Kyuubi, because

1. Kyuubi has a dev/dependencyList to avoid unexpected dependency change
2. Kyuubi has integrated to many components like hive zookeeper, we can not just use the latest version, it may break the compatible with other components.

[yangrong688]

Thanks of your detail explaination, I got it.

It may not suitable for Kyuubi, because

1. Kyuubi has a dev/dependencyList to avoid unexpected dependency change
2. Kyuubi has integrated to many components like hive zookeeper, we can not just use the latest version, it may break the compatible with other components.

Thanks for your detail explaination, I got it. I will close this issue then.