Add dependabot

[inancgumus]

What?

Adds Github dependabot for our repository.

Why?

To keep our dependencies up to date, like k6-core, CDP proto, etc.

We usually do this manually, which can be a hassle and causes our dependencies go stale:

• Update to the latest version of k6 #1047, Update to the latest master version of k6 #975, Update to the latest version of k6 #907, Update to k6-core master and fix BPool #830, Update to latest k6 master version #740, Update/k6 master #739, ...

Checklist

• I have performed a self-review of my code
• I have added tests for my changes
• I have commented on my code, particularly in hard-to-understand areas

[ankur22]

Seems like a good idea.

My only thought around this is that we shouldn't update before k6 unless there's a good reason to do so (blocking us due to a bug in a dependency etc).

[inancgumus]

Seems like a good idea.

Thanks, @ankur22 😊

My only thought around this is that we shouldn't update before k6 unless there's a good reason to do so (blocking us due to a bug in a dependency, etc.).

No worries. The bot only makes PRs, and we can decide whether to merge them. It has a UI that we can talk to using Github comments. So, we can include or exclude some of the dependencies per PR.

[inancgumus]

@ankur22 I made some changes because the configuration syntax was incorrect.

[ankur22]

LGTM 🚀

[ankur22]

LGTM 🚀

[ka3de]

LGTM 👏